localvault 1.12.2 → 1.12.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/localvault/cli.rb +24 -1
- data/lib/localvault/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 6798f21f6875910fa68c5300a929b4c18e757a9c03251cd71d46bb46e6cd85b7
|
|
4
|
+
data.tar.gz: a40a445f7d92baad0645bc9ab2f2a900bda43d09a657e07735c565bb5f705f01
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 45cf703a841eedc73c9b77ac19a92059075dd914c4c1075ff79beca784b61fce4396ffbf51b206315f55c6179c44270d3238a6174c479bc1a2e9e1e9bf4e34d7
|
|
7
|
+
data.tar.gz: 661933cfaa2a6f1a69a5459f0e87580912178e1faeeff0becf7823e4fbb007fa63fad8cfa2f7a05d363146309e20ef1ad4b316143d94a541ba1efb78ae3aa340
|
data/lib/localvault/cli.rb
CHANGED
|
@@ -116,7 +116,7 @@ module LocalVault
|
|
|
116
116
|
# disappearing from help.
|
|
117
117
|
HELP_SECTIONS = [
|
|
118
118
|
["GETTING STARTED", %w[login config init demo]],
|
|
119
|
-
["SECRETS", %w[set get show groups list delete import env exec]],
|
|
119
|
+
["SECRETS", %w[set get show reveal groups list delete import env exec]],
|
|
120
120
|
["VAULT MANAGEMENT", %w[vaults switch rekey unlock lock reset rename copy]],
|
|
121
121
|
["SYNC (requires localvault login)", %w[sync]],
|
|
122
122
|
["TEAM SHARING (requires localvault login)", %w[dashboard verify add remove team]],
|
|
@@ -526,6 +526,29 @@ module LocalVault
|
|
|
526
526
|
abort_with "Wrong passphrase for vault '#{vault_name}'"
|
|
527
527
|
end
|
|
528
528
|
|
|
529
|
+
desc "reveal [GROUP]", "Show secrets with values unmasked (same as `show --reveal`)"
|
|
530
|
+
long_desc <<~DESC
|
|
531
|
+
Show secrets with their values unmasked. Identical to `show --reveal`, and
|
|
532
|
+
it takes the same options — `reveal` is simply the verb most people reach
|
|
533
|
+
for. A bare argument is treated as the group to show.
|
|
534
|
+
|
|
535
|
+
\x05 localvault reveal # every secret, unmasked
|
|
536
|
+
\x05 localvault reveal CLOUDFLARE # one group
|
|
537
|
+
\x05 localvault reveal --group CLOUDFLARE # the same thing
|
|
538
|
+
\x05 localvault reveal -p kuickr -v intellectaco
|
|
539
|
+
|
|
540
|
+
Plaintext output is still gated: it refuses to print values when stdout is
|
|
541
|
+
not a terminal, so a redirect or a pipe can't quietly capture secrets.
|
|
542
|
+
DESC
|
|
543
|
+
method_option :group, aliases: "-g", type: :string, lazy_default: GROUP_ALL_SENTINEL, desc: "Show all groups or one group by name"
|
|
544
|
+
method_option :project, aliases: "-p", type: :string, desc: "Show only this project group"
|
|
545
|
+
def reveal(group = nil)
|
|
546
|
+
merged = options.merge("reveal" => true)
|
|
547
|
+
merged["group"] = group if group && merged["project"].nil?
|
|
548
|
+
self.options = merged
|
|
549
|
+
show
|
|
550
|
+
end
|
|
551
|
+
|
|
529
552
|
desc "show", "Display secrets in a formatted table (masked by default)"
|
|
530
553
|
long_desc <<~DESC
|
|
531
554
|
Show secrets in the current vault. Values are masked by default.
|
data/lib/localvault/version.rb
CHANGED