heavy-duty/cast
7
0
Fork 0
Code Issues 4 Pull requests Projects Releases 3 Packages Wiki Activity Actions

fix(secrets): read the age identity once per process so <(...) keys survive --all #94

Merged
dan-claude-bot merged 2 commits from fix/age-key-read-once into main 2026-07-18 20:23:41 +00:00
Conversation 1 Commits 2 Files changed 2 +1 -1
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit a504ac2b54 - Show all commits

2
test/secrets.test.ts
View file

@ -63,7 +63,7 @@ describe("secretsFileFor", () => {
}); });
// Pins the read-once shape of `<(pm read …)` that the fd-path test above // Pins the read-once shape of `<(pm read …)` that the fd-path test above
// cannot: a regular file behind /proc/self/fd re-opens at offset 0 on every // cannot: a regular file behind an fd path re-opens at offset 0 on every
// read, but a pipe drains. `diff --all` / `apply --all` decrypt once per // read, but a pipe drains. `diff --all` / `apply --all` decrypt once per
// project, so the identity must be read once per process and reused. // project, so the identity must be read once per process and reused.
describe("decryptSecrets identity caching", () => { describe("decryptSecrets identity caching", () => {