Skip to content

store: seal secret columns at rest !495

merged merged by cmc on 2026-09-28 22:37 UTC · krz/gitbay:secrets-at-rest into main

deploy, wiki: provision and document the secret key file

cmc · 2026-09-28 09:16 UTC

Verified · cmc 7e5de5325c
e2e: a key file per instance; the archive carries secrets sealed and no key

cmc · 2026-09-28 09:09 UTC

Verified · cmc 1481a12712
gitbayd: load the secret key file; admin secrets init, rotate, check

cmc · 2026-09-28 09:02 UTC

Verified · cmc 24b9cdbca1
store: seal CI secrets, webhook secrets, mirror tokens and device tokens

cmc · 2026-09-28 08:54 UTC

Verified · cmc 1ec2c9cfb7
config: server.secret_key_file, outside server.root

cmc · 2026-09-28 08:43 UTC

Verified · cmc b13a24703d
seal: AES-256-GCM keyring for secret columns

cmc · 2026-09-28 08:36 UTC

Verified · cmc ed99c936ad