secret

package
v0.1.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jul 14, 2026 License: Apache-2.0 Imports: 14 Imported by: 0

Documentation

Overview

Package secret resolves explicit secret references without placing secret values in command-line arguments, reports, or configuration documents.

Index

Constants

View Source 
const MaxSecretBytes = 64 << 10

Variables

View Source 
var (
	ErrNotFound     = errors.New("secret not found")
	ErrExecDisabled = errors.New("exec secret resolver is disabled")
	ErrKeyring      = errors.New("keyring resolver is not available in this build")
)

Functions

func Wipe 

func Wipe(value []byte)

Wipe overwrites a mutable secret buffer. Go does not guarantee removal of all compiler/runtime copies, so this is defense in depth rather than an absolute memory-erasure claim.

Types

type Resolver 

type Resolver struct {
	LookupEnv       func(string) (string, bool)
	ExecEnabled     bool
	ExecDigests     map[string]schema.Digest
	ExecTimeout     time.Duration
	ExecEnvironment []string
	ExecDirectory   string
	ExecArguments   map[string][]string
}

func (Resolver) Resolve 

func (resolver Resolver) Resolve(ctx context.Context, reference string) ([]byte, error)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.