Guard Secret data at runtime - #761

Open

kabicin wants to merge 17 commits into

mainfrom

sast-305-memguard

Commits on Mar 26, 2026

Add secret cleanup after reconcile context cancel
kabicin
committed
3fbca0c
Add TrackedCreateOrUpdate and WaitableSecretResource
kabicin
committed
4fd5b15
Use memguard locked buffer for Secret operations
kabicin
committed
cbdc291
go mod tidy
kabicin
committed
180b557
Remove reconcile context in main controller
kabicin
committed
c250963
Remove unsafe destroy on LockedData attribute
kabicin
committed
25450e2
Update serializeData function name
kabicin
committed
6aea20c
init locked secret name/namespace when undefined
kabicin
committed
03f645a

Commits on Mar 27, 2026

Add SecretMap set buffer function
kabicin
committed
b9e61ff
Use Secret buffer set helper
kabicin
committed
709a904

Commits on Mar 30, 2026

Add cleanup func in CreateOrUpdateSecret
kabicin
committed
9b8b59c
Set secret labels on locked secret in secret.go
kabicin
committed
7330851

Commits on Mar 31, 2026

Create new data array every time in CopySecret
kabicin
committed
0ffdf2a
Add mutateFn to CreateOrUpdateSecret
kabicin
committed
4d5ca50
Add SetCopy helper
kabicin
committed
accd4bd
Add nil checks to CreateOrUpdateSecret
kabicin
committed
2360ea6

Commits on May 27, 2026

Merge branch 'main' into sast-305-memguard
kabicin
authored
46b3426