CVS commit: pkgsrc/security

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Wed Jan 22 09:25:18 UTC 2025

Modified Files:
        pkgsrc/security: Makefile
Added Files:
        pkgsrc/security/git-secret: DESCR Makefile PLIST distinfo

Log Message:
git-secret: added version 0.5.0

git-secret is a bash tool which stores private data inside a git repo.
git-secret encrypts files with permitted users' public keys, allowing users you
trust to access encrypted data using pgp and their secret keys.

With git-secret, changes to access rights are simplified, and private-public
key issues are handled for you.

When someone's permission is revoked, secrets do not need to be changed with
git-secret - just remove their key from the repo's keyring using git secret
removeperson their%email.com@localhost, re-encrypt the files, and they won't be able to
decrypt secrets anymore. If you think the user might have copied the secrets or
keys when they had access, then you should also change the secrets.


To generate a diff of this commit:
cvs rdiff -u -r1.969 -r1.970 pkgsrc/security/Makefile
cvs rdiff -u -r0 -r1.1 pkgsrc/security/git-secret/DESCR \
    pkgsrc/security/git-secret/Makefile pkgsrc/security/git-secret/PLIST \
    pkgsrc/security/git-secret/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/Makefile
diff -u pkgsrc/security/Makefile:1.969 pkgsrc/security/Makefile:1.970
--- pkgsrc/security/Makefile:1.969      Thu Jan 16 18:00:00 2025
+++ pkgsrc/security/Makefile    Wed Jan 22 09:25:18 2025
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.969 2025/01/16 18:00:00 wiz Exp $
+# $NetBSD: Makefile,v 1.970 2025/01/22 09:25:18 adam Exp $
 #
 
 COMMENT=       Security and cryptography tools and libraries
@@ -107,6 +107,7 @@ SUBDIR+=    fprint-demo
 SUBDIR+=       fsh
 SUBDIR+=       gcr
 SUBDIR+=       git-crypt
+SUBDIR+=       git-secret
 SUBDIR+=       gnome-keyring
 SUBDIR+=       gnu-crypto
 SUBDIR+=       gnu-pw-mgr

Added files:

Index: pkgsrc/security/git-secret/DESCR
diff -u /dev/null pkgsrc/security/git-secret/DESCR:1.1
--- /dev/null   Wed Jan 22 09:25:18 2025
+++ pkgsrc/security/git-secret/DESCR    Wed Jan 22 09:25:18 2025
@@ -0,0 +1,12 @@
+git-secret is a bash tool which stores private data inside a git repo.
+git-secret encrypts files with permitted users' public keys, allowing users you
+trust to access encrypted data using pgp and their secret keys.
+
+With git-secret, changes to access rights are simplified, and private-public
+key issues are handled for you.
+
+When someone's permission is revoked, secrets do not need to be changed with
+git-secret - just remove their key from the repo's keyring using git secret
+removeperson their%email.com@localhost, re-encrypt the files, and they won't be able to
+decrypt secrets anymore. If you think the user might have copied the secrets or
+keys when they had access, then you should also change the secrets.
Index: pkgsrc/security/git-secret/Makefile
diff -u /dev/null pkgsrc/security/git-secret/Makefile:1.1
--- /dev/null   Wed Jan 22 09:25:18 2025
+++ pkgsrc/security/git-secret/Makefile Wed Jan 22 09:25:18 2025
@@ -0,0 +1,36 @@
+# $NetBSD: Makefile,v 1.1 2025/01/22 09:25:18 adam Exp $
+
+DISTNAME=      git-secret-0.5.0
+CATEGORIES=    security
+MASTER_SITES=  ${MASTER_SITE_GITHUB:=sobolevn/}
+GITHUB_TAG=    v${PKGVERSION_NOREV}
+
+MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
+HOMEPAGE=      https://github.com/sobolevn/git-secret
+COMMENT=       Git subcommand to store your private data inside a git repository
+LICENSE=       mit
+
+DEPENDS+=      gawk-[0-9]*:../../lang/gawk
+DEPENDS+=      git-base-[0-9]*:../../devel/git-base
+DEPENDS+=      gnupg2-[0-9]*:../../security/gnupg2
+
+USE_TOOLS+=    bash:run
+
+REPLACE_BASH+= src/*.sh
+REPLACE_BASH+= src/commands/*.sh
+REPLACE_BASH+= src/_utils/*.sh
+REPLACE_BASH+= utils/*.sh
+
+SUBST_CLASSES+=                gpgpath
+SUBST_STAGE.gpgpath=   pre-configure
+SUBST_MESSAGE.gpgpath= Fixing gpg path.
+SUBST_FILES.gpgpath=   src/_utils/_git_secret_tools.sh
+SUBST_SED.gpgpath=     -e 's,SECRETS_GPG_COMMAND:="gpg",SECRETS_GPG_COMMAND:="${PREFIX}/bin/gpg2",'
+
+SUBST_CLASSES+=                mandir
+SUBST_STAGE.mandir=    pre-configure
+SUBST_MESSAGE.mandir=  Fixing paths for man pages.
+SUBST_FILES.mandir=    utils/install.sh
+SUBST_SED.mandir=      -e 's,share/man,${PKGMANDIR},g'
+
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/git-secret/PLIST
diff -u /dev/null pkgsrc/security/git-secret/PLIST:1.1
--- /dev/null   Wed Jan 22 09:25:18 2025
+++ pkgsrc/security/git-secret/PLIST    Wed Jan 22 09:25:18 2025
@@ -0,0 +1,16 @@
+@comment $NetBSD: PLIST,v 1.1 2025/01/22 09:25:18 adam Exp $
+bin/git-secret
+man/man1/git-secret-add.1
+man/man1/git-secret-cat.1
+man/man1/git-secret-changes.1
+man/man1/git-secret-clean.1
+man/man1/git-secret-hide.1
+man/man1/git-secret-init.1
+man/man1/git-secret-list.1
+man/man1/git-secret-remove.1
+man/man1/git-secret-removeperson.1
+man/man1/git-secret-reveal.1
+man/man1/git-secret-tell.1
+man/man1/git-secret-usage.1
+man/man1/git-secret-whoknows.1
+man/man7/git-secret.7
Index: pkgsrc/security/git-secret/distinfo
diff -u /dev/null pkgsrc/security/git-secret/distinfo:1.1
--- /dev/null   Wed Jan 22 09:25:18 2025
+++ pkgsrc/security/git-secret/distinfo Wed Jan 22 09:25:18 2025
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2025/01/22 09:25:18 adam Exp $
+
+BLAKE2s (git-secret-0.5.0.tar.gz) = b8af730df4d49306c562b17314ff1fae29b27588a05679a3446436d765c61512
+SHA512 (git-secret-0.5.0.tar.gz) = c685ee4d7b7d247c37805fc3a16c431eff7f6740899d65f9178514b99e84ff83cb59330e6fb73da627f00bb60d0cca76da8b31004fcc3926dcee3fed15d65b85
+Size (git-secret-0.5.0.tar.gz) = 854497 bytes