v0.8.0 - 2024-12-30

Added

• Follow 1st level symlinks when discovery paths like private keys directories (adding symlink follow at all levels adds too many edge cases).

v0.7.2 - 2024-12-19

Changed

• Updated age to v1.2.1 (security fix)

v0.7.1 - 2024-10-4

Changed

• Fix binary builds

v0.7.0 - 2024-10-4

Added

• The commands requiring --passphrase, now can use --passphrase-env to let Agebox get the passphrase from the env var.
• The commands requiring --passphrase, now can use - value to get the passphrase from stdin.

Changed

• Set dependencies to latest versions.
• Update Go to v1.23
• Update Age to v1.2.0

v0.6.1 - 2021-10-15

Fixed

• On public and private key discovery, now ignores the sockets so application doesn't fail while trying to read them.

v0.6.0 - 2021-09-10

Changed

• cat cmd now logs info and warning messages as debug instead.
• Update age to v1.0.0.

v0.5.2 - 2021-05-22

Changed

• Fixed bug that wouldn't allow loading X25519 (Age) public keys with comments or newlines.
• Allow loading X25519 (Age) public keys in the form of Public key: {PUBLIC_KEY} (e.g: Using age-keygen -o ./priv.key 2> ./pub.key).

v0.5.1 - 2021-05-15

Changed

• Fixed bug that wouldn't allow loading X25519 (Age) keys with comments or newlines.

v0.5.0 - 2021-05-03

Changed

• Remove the 20 public key encryption limit as Age has removed the decrypt limits.

v0.4.0 - 2021-03-25

Added

• Private key discovery in a directory.

Changed

• When loading public keys, invalid ones will be ignored instead of failing.
• Fail if we have more than 20 recipients on encryption (due to Age decrypt limit).
• --private-key flag has been deprecated in favor of --private-keys.
• By default private keys will try to be loaded from $HOME/.ssh dir.
• Use multiple private keys to decrypt, if any of them is able to decrypt it will do it.

v0.3.0 - 2021-03-19

Added

• validate cmd that validates tracked files.
• validate cmd checks tracked secrets are not decrypted.
• validate cmd checks tracked secrets are encrypted.
• validate cmd optionally checks tracked secrets can be decrypted.
• Support for SSH passphrase using stdin.
• Support for SSH passphrase using cmd --passphrase flag.