angryegret/sekrets

Simple program to leverage keybase.io and gpg to encrypt files for multiple public keys

sekrets's Issues

Recipient lists should have "includes"

When sekrets reads a recipient file (as specified by '--recipients'), it should be able to interpret and use "includes", e.g. 'include front-end-devs.txt', where the file name is a path relative to the recipient file (or maybe absolute is available? Could be tricky Windows vs. POSIX). An example recipient file using includes might be:

include front-end-devs.txt
include ../qa/front-end-qa.txt
[email protected] C40657BA9679BCD93BD4559D0C3D377FF6345B4A

Test case should be added for default filenames

When the output filename is specified as a directory without an actual filename, sekrets should use the input filename. Right now, this behavior is ambiguous. If sekrets does use use this filename by default, there should be a test to ensure it does. If it does not, it should, and a test should be written to ensure it does.

There should be a command to re-encrypt

If a user is ever added or removed to a recipients list, currently the file has to be explicitly decrypted and re-encrypted. Instead, we should provide a command to do so in-place, specifically without dropping anything to the filesystem (for security reasons).

Add short parameters to the CLI

If secret key is missing from keyring, decrypt silently fails

Tab completion for the command line

On decrpyt, if no output is given, pipe to stdout

More complete test cases are needed

Add command to list recipients for an encrypted file.