From 88f6ca2fb24973b78afe76f82ea86171e40fccff Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Mon, 2 Mar 2026 10:54:03 +0200 Subject: store/cli: deduplicate shred helper (task 400) --- internal/store/store.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'internal/store') diff --git a/internal/store/store.go b/internal/store/store.go index 9acb52d..b92f011 100644 --- a/internal/store/store.go +++ b/internal/store/store.go @@ -555,7 +555,7 @@ func (s *Store) ShredAllExported(ctx context.Context) error { if err != nil || !info.Mode().IsRegular() { continue } - if err := shredFile(ctx, entry); err != nil { + if err := ShredFile(ctx, entry); err != nil { // Record the error but keep shredding — security demands best-effort // destruction of all exported secrets even if one fails. lastErr = err @@ -564,9 +564,9 @@ func (s *Store) ShredAllExported(ctx context.Context) error { return lastErr } -// shredFile destroys a single file using shred(1) if available, or rm -Pfv. +// ShredFile destroys a single file using shred(1) if available, or rm -Pfv. // This mirrors Ruby's Geheim#shred_file method. -func shredFile(ctx context.Context, filePath string) error { +func ShredFile(ctx context.Context, filePath string) error { if _, err := exec.LookPath("shred"); err == nil { cmd := exec.CommandContext(ctx, "shred", "-vu", filePath) cmd.Stdout = io.Discard -- cgit v1.2.3