• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

umputun / secrets
84%

Build:
DEFAULT BRANCH: master
Repo Added 19 Feb 2020 07:55AM UTC
Token sB5IQd6nrGTB6eLS13Gs8W0iEnogsEMeH regen
Build 490 Last
Files 15
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH master
branch: master
CHANGE BRANCH
x
Reset
Sync Branches
  • master
  • add-shell-completions
  • audit-logging-improvements
  • auth-for-link-generation
  • bump-ver
  • bump_modules
  • ciphertext-format-validation
  • csp-inline-scripts-elimination
  • dependabot
  • dependabot/github_actions/github-actions-updates-02325a8da5
  • dependabot/github_actions/github-actions-updates-167a898cab
  • dependabot/github_actions/github-actions-updates-2d3733e69a
  • dependabot/github_actions/github-actions-updates-35b2a8182b
  • dependabot/github_actions/github-actions-updates-822744b99e
  • dependabot/github_actions/github-actions-updates-900e03fd4a
  • dependabot/github_actions/github-actions-updates-b48345356d
  • dependabot/github_actions/github-actions-updates-c0bc7ccf5f
  • dependabot/go_modules/github.com/go-pkgz/lgr-0.12.2
  • dependabot/go_modules/github.com/go-pkgz/lgr-0.12.3
  • dependabot/go_modules/github.com/go-pkgz/rest-1.21.0
  • dependabot/go_modules/github.com/go-pkgz/routegroup-1.6.0
  • dependabot/go_modules/github.com/playwright-community/playwright-go-0.5700.0
  • dependabot/go_modules/github.com/playwright-community/playwright-go-0.5700.1
  • dependabot/go_modules/github.com/stretchr/testify-1.11.0
  • dependabot/go_modules/github.com/stretchr/testify-1.12.1
  • dependabot/go_modules/go-modules-updates-1bff98da5a
  • dependabot/go_modules/go-modules-updates-3f2513770d
  • dependabot/go_modules/go-modules-updates-4c23bf149f
  • dependabot/go_modules/go-modules-updates-709908b018
  • dependabot/go_modules/go-modules-updates-891cda64be
  • dependabot/go_modules/go-modules-updates-acb2299ea6
  • dependabot/go_modules/go-modules-updates-be53f05598
  • dependabot/go_modules/go-modules-updates-dc9768f38b
  • dependabot/go_modules/go-modules-updates-dd7da38a6b
  • dependabot/go_modules/golang.org/x/crypto-0.17.0
  • dependabot/go_modules/golang.org/x/crypto-0.31.0
  • dependabot/go_modules/golang.org/x/crypto-0.41.0
  • dependabot/go_modules/golang.org/x/crypto-0.43.0
  • dependabot/go_modules/golang.org/x/crypto-0.44.0
  • dependabot/go_modules/golang.org/x/crypto-0.46.0
  • dependabot/go_modules/golang.org/x/crypto-0.47.0
  • dependabot/go_modules/golang.org/x/crypto-0.48.0
  • dependabot/go_modules/golang.org/x/crypto-0.49.0
  • dependabot/go_modules/golang.org/x/crypto-0.50.0
  • dependabot/go_modules/golang.org/x/crypto-0.51.0
  • dependabot/go_modules/golang.org/x/crypto-0.52.0
  • dependabot/go_modules/golang.org/x/crypto-0.53.0
  • dependabot/go_modules/modernc.org/sqlite-1.42.2
  • dependabot/go_modules/modernc.org/sqlite-1.48.1
  • dependabot/go_modules/modernc.org/sqlite-1.48.2
  • dependabot/npm_and_yarn/frontend/copy-props-2.0.5
  • dependabot/npm_and_yarn/frontend/decode-uri-component-0.2.2
  • dependabot/npm_and_yarn/frontend/engine.io-and-browser-sync-6.2.1
  • dependabot/npm_and_yarn/frontend/follow-redirects-1.14.8
  • dependabot/npm_and_yarn/frontend/ini-1.3.8
  • dependabot/npm_and_yarn/frontend/lodash-4.17.19
  • dependabot/npm_and_yarn/frontend/minimist-1.2.6
  • dependabot/npm_and_yarn/frontend/socket.io-parser-3.3.3
  • dependabot/npm_and_yarn/frontend/ua-parser-js-0.7.33
  • docs/smtp-example-auth
  • e2e-tests
  • feat/csrf-protection
  • feat/file-upload
  • feat/file-upload-v2
  • feat/ui-redesign
  • feature/email-sharing
  • feature/paranoid-mode-sqlite
  • fix-content-type-header
  • fix-doc-accuracy
  • fix/file-upload-review-fixes
  • fix/filename-wrapping
  • fix/one-time-read-race
  • humanDuration-fix
  • hybrid-encryption-mode
  • increase-test-coverage
  • issue-31-new-ui
  • issue-40-fix-http
  • issue-refactor-for-issue-40
  • maintenance-deps-ci
  • migrate-router-to-routegroup
  • modern
  • modern-ui-redesign
  • multiple-domains
  • optional-pin
  • paskal/dependabot-security-updates
  • paskal/fix_golangci_lint
  • refs/tags/v1.0.0
  • refs/tags/v1.0.1
  • refs/tags/v1.1.0
  • refs/tags/v1.2.0
  • refs/tags/v1.2.1
  • refs/tags/v1.2.2
  • refs/tags/v1.2.3
  • refs/tags/v1.2.4
  • refs/tags/v1.3.0
  • refs/tags/v1.4.0
  • refs/tags/v1.4.1
  • refs/tags/v1.4.2
  • refs/tags/v1.4.3
  • refs/tags/v1.4.4
  • refs/tags/v1.4.5
  • refs/tags/v1.5.0
  • refs/tags/v1.5.1
  • refs/tags/v1.6.0
  • refs/tags/v1.6.1
  • refs/tags/v1.6.2
  • refs/tags/v1.6.3
  • refs/tags/v1.7.0
  • refs/tags/v1.7.1
  • refs/tags/v1.8.0
  • refs/tags/v1.8.1
  • refs/tags/v1.9.0
  • refs/tags/v1.9.1
  • refs/tags/v1.9.2
  • refs/tags/v1.9.3
  • refs/tags/v2.0.0
  • refs/tags/v2.1.0
  • refs/tags/v2.2.0
  • refs/tags/v2.2.1
  • refs/tags/v2.2.2
  • refs/tags/v2.2.3
  • refs/tags/v2.2.4
  • refs/tags/v2.2.5
  • refs/tags/v2.2.6
  • remove-old-frontend
  • security-fixes
  • seo-improvements

05 Sep 2026 08:30AM UTC coverage: 84.099% (+0.1%) from 83.957%
33955453719

push

github

web-flow
fix: close log, session and rate-limit gaps found in the security review (#134)

* fix: close log, session and rate-limit gaps found in the security review

- mask key and pin in every request log line by path position, not key length;
  12-char keys were logged with the pin in clear
- stop dumping the decoded request body and pin on API JSON decode errors
- bind session signature to uuid.timestamp, reject malformed ids and future
  timestamps, and derive the session secret from SignKey and AuthHash
- trust proxy client-IP headers only behind --proxy-trust-headers; compose
  examples enable it and strip client-supplied headers at the proxy
- keep the decryption key out of the email popup GET, attach it on submit
  only, and document that emailing the link hands the key to the server

* fix: hash the client ip without the ephemeral port

without rest.RealIP in the chain RemoteAddr carries the port, so the hashed
ip in the logs changed on every connection instead of identifying a client

36 of 37 new or added lines in 4 files covered. (97.3%)

1740 of 2069 relevant lines covered (84.1%)

80.32 hits per line

Relevant lines Covered
Build:
Build:
2069 RELEVANT LINES 1740 COVERED LINES
80.32 HITS PER LINE
Source Files on master
  • Tree
  • List 15
  • Changed 4
  • Source Changed 0
  • Coverage Changed 4
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
33955453719 master fix: close log, session and rate-limit gaps found in the security review (#134) * fix: close log, session and rate-limit gaps found in the security review - mask key and pin in every request log line by path position, not key length; 12-char k... push 05 Sep 2026 08:31AM UTC web-flow github
84.1
32438763234 master docs: correct the cause in the golangci backlog note no base image was rebuilt. buildgo-latest only republishes on a baseimage version tag, so it sat on the February image while this repo bumped its own CI linter and added directives for it. push 21 Aug 2026 02:08AM UTC umputun github
83.96
32437155595 master docs: note the split golangci-lint versions in backlog the Dockerfile lints with whatever version the base image ships while the workflow pins its own, and the two can demand opposite things. Fixed today by aligning the base image pin, but the ta... push 21 Aug 2026 01:41AM UTC umputun github
83.96
32434282932 master docs: add authentication to smtp example (#131) push 21 Aug 2026 12:53AM UTC web-flow github
83.96
32434275809 master fix: make one-time reads atomic (#130) push 21 Aug 2026 12:53AM UTC web-flow github
83.96
32346416708 master Fix incorrect crypto and key details in documentation (#125) Previously, README described server-side encryption as AES-256-GCM and PIN hashing as bcrypt cost 14, while `app/messager/crypt.go` uses NaCl secretbox (XSalsa20-Poly1305) and `app/mess... push 20 Aug 2026 07:57AM UTC web-flow github
83.77
32346114624 master Bump go to 1.26, update dependencies and CI, fix the e2e workflow (#126) * Bump go to 1.26, update dependencies and CI actions Raises the go directive to 1.26.0 with matching `go-version` in all three workflows, updates the module dependencies a... push 20 Aug 2026 07:54AM UTC web-flow github
83.77
23939947649 master chore(deps): bump github.com/go-jose/go-jose/v3 (#115) Bumps the go-modules-updates group with 1 update in the / directory: [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose). Updates `github.com/go-jose/go-jose/v3` from 3.0.4 ... push 03 Apr 2026 08:33AM UTC web-flow github
83.73
23881193130 master docs: update changelog for v2.2.6 push 02 Apr 2026 02:45AM UTC umputun github
83.73
23881042976 master chore(deps): update go dependencies Update x/crypto 0.47.0->0.49.0, sqlite 1.42.2->1.48.0, slack-go 0.17.3->0.20.0, x/net 0.48.0->0.52.0, x/sys 0.40.0->0.42.0 push 02 Apr 2026 02:40AM UTC umputun github
83.73
See All Builds (405)
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE TRIAL · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc