revault_api 0.5.0-aarch64-linux → 0.6.0-aarch64-linux
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +19 -20
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: c987414e59a7565309f62571144da164f1106ae169809a5a8f27f21497b61cf4
|
|
4
|
+
data.tar.gz: 34a972935e1f39b4bd2e15f14e76cb89b4b365456195065e20ffc33a449ab422
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: c5b74d0171e145409d2a381cfeaad4d9af5a4328f3b31255e756c07806612d9d27855f2892f71829f1f1f6108915e09140789e776345c650a92141563f7d6289
|
|
7
|
+
data.tar.gz: 3103052d7eb2a8ca5e532f56832295a7b1f3bd7bd860838e510719f9e047cd3810b4b403273c4fa947898e865aa4e49b865a17c478ae80e40b975114fc1f523e
|
data/README.md
CHANGED
|
@@ -123,10 +123,10 @@ including its include and exclude rules, is encrypted inside the lockbox and
|
|
|
123
123
|
travels with it.
|
|
124
124
|
|
|
125
125
|
```bash
|
|
126
|
-
lbx secrets.lbox
|
|
127
|
-
lbx secrets.lbox
|
|
128
|
-
lbx secrets.lbox
|
|
129
|
-
lbx secrets.lbox
|
|
126
|
+
lbx secrets.lbox mirrors source create --from ./src --to /projects/source
|
|
127
|
+
lbx secrets.lbox mirrors source rules add exclude target/** '*.tmp'
|
|
128
|
+
lbx secrets.lbox mirrors source status
|
|
129
|
+
lbx secrets.lbox mirrors source update
|
|
130
130
|
```
|
|
131
131
|
|
|
132
132
|
`status` previews the complete plan; `update` recalculates and applies it.
|
|
@@ -163,7 +163,7 @@ See [docs/cli_how_to.md](docs/cli_how_to.md) for command-focused examples.
|
|
|
163
163
|
Create another local profile:
|
|
164
164
|
|
|
165
165
|
```bash
|
|
166
|
-
lockbox vault
|
|
166
|
+
lockbox vault profiles create laptop
|
|
167
167
|
```
|
|
168
168
|
|
|
169
169
|
Create an independent encrypted vault with a fresh profile and register that
|
|
@@ -185,14 +185,14 @@ material from the current vault.
|
|
|
185
185
|
List profiles and export a public key:
|
|
186
186
|
|
|
187
187
|
```bash
|
|
188
|
-
lockbox vault
|
|
189
|
-
lockbox vault
|
|
188
|
+
lockbox vault profiles list
|
|
189
|
+
lockbox vault profiles export ./laptop.pub --name laptop
|
|
190
190
|
```
|
|
191
191
|
|
|
192
192
|
Import a contact public key after independently verifying its fingerprint:
|
|
193
193
|
|
|
194
194
|
```bash
|
|
195
|
-
lockbox vault
|
|
195
|
+
lockbox vault contacts import alice ./alice.pub \
|
|
196
196
|
--fingerprint <fingerprint> \
|
|
197
197
|
--fingerprint-channel phone-call-to-owner
|
|
198
198
|
```
|
|
@@ -215,7 +215,7 @@ Exporting a private key is supported for backup and migration, but treat the
|
|
|
215
215
|
output as a secret:
|
|
216
216
|
|
|
217
217
|
```bash
|
|
218
|
-
lockbox vault
|
|
218
|
+
lockbox vault profiles backup ./default.profile-backup
|
|
219
219
|
```
|
|
220
220
|
|
|
221
221
|
Private vault keys are stored inside the local vault as secret variable records,
|
|
@@ -226,23 +226,22 @@ not as normal files in the vault lockbox. See the CLI help and
|
|
|
226
226
|
|
|
227
227
|
Variables are encrypted metadata, not files. They do not appear in file
|
|
228
228
|
listings and are loaded only when variable commands or APIs request them. The
|
|
229
|
-
|
|
230
|
-
aliases.
|
|
229
|
+
command group is `variables`.
|
|
231
230
|
|
|
232
231
|
Plain variables are for values that are useful configuration but not high-value
|
|
233
232
|
secrets:
|
|
234
233
|
|
|
235
234
|
```bash
|
|
236
|
-
lockbox secrets.lbox
|
|
237
|
-
lockbox secrets.lbox
|
|
238
|
-
lockbox secrets.lbox
|
|
235
|
+
lockbox secrets.lbox variables set DATABASE_URL --value 'postgres://localhost/app'
|
|
236
|
+
lockbox secrets.lbox variables set DATABASE_URL='postgres://localhost/app'
|
|
237
|
+
lockbox secrets.lbox variables get DATABASE_URL
|
|
239
238
|
```
|
|
240
239
|
|
|
241
240
|
With a session-default lockbox, assignment syntax is also supported:
|
|
242
241
|
|
|
243
242
|
```bash
|
|
244
|
-
lockbox
|
|
245
|
-
lockbox
|
|
243
|
+
lockbox variables set DATABASE_URL='postgres://localhost/app'
|
|
244
|
+
lockbox variables set DATABASE_URL 'postgres://localhost/app'
|
|
246
245
|
```
|
|
247
246
|
|
|
248
247
|
Secret variables are for passwords, API tokens, signing keys, and similar
|
|
@@ -250,10 +249,10 @@ material. They use secure-memory handling in the variable path and must be provi
|
|
|
250
249
|
through an explicit source:
|
|
251
250
|
|
|
252
251
|
```bash
|
|
253
|
-
lockbox secrets.lbox
|
|
254
|
-
lockbox secrets.lbox
|
|
255
|
-
lockbox secrets.lbox
|
|
256
|
-
lockbox secrets.lbox
|
|
252
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --interactive
|
|
253
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --file ./api-token.txt
|
|
254
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --stdin
|
|
255
|
+
lockbox secrets.lbox variables set --secret API_TOKEN --from-env API_TOKEN
|
|
257
256
|
```
|
|
258
257
|
|
|
259
258
|
Avoid passing secrets as command-line arguments. Shell history and process
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: revault_api
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.6.0
|
|
5
5
|
platform: aarch64-linux
|
|
6
6
|
authors:
|
|
7
7
|
- OnePub
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2026-10-
|
|
11
|
+
date: 2026-10-24 00:00:00.000000000 Z
|
|
12
12
|
dependencies: []
|
|
13
13
|
description: Complete class-based reVault lockbox and vault API
|
|
14
14
|
email:
|