git Pull Request: Add secure one-shot nsec file input Published at
2026-08-13 02:41:56 GMTEvent JSON
{
"id": "8d76c2deece812c5ae4fd6bc8d0345a4b3467286d688a29930778e4e2d51f5b8",
"pubkey": "9f888fe6f3bf1e6b01bbca3e1d6e035650024bef38846fe80ebfc8a9839a54bc",
"created_at": 1786588916,
"kind": 1618,
"tags": [
[
"a",
"30617:a008def15796fba9a0d6fab04e8fd57089285d9fd505da5a83fe8aad57a3564d:ngit",
"wss://relay.ngit.dev"
],
[
"subject",
"Add secure one-shot nsec file input"
],
[
"alt",
"git Pull Request: Add secure one-shot nsec file input"
],
[
"branch-name",
"nsec-file-input-v2"
],
[
"r",
"26689f97810fc656c7134c76e2a37d33b2e40ce7"
],
[
"c",
"d7c07a711f602b2929a9795b54ea02544dbbffb6"
],
[
"clone",
"https://relay.ngit.dev/npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr/ngit.git"
],
[
"merge-base",
"03ee1ec05e3994e52993cacde12f7471853e82ef"
],
[
"p",
"a008def15796fba9a0d6fab04e8fd57089285d9fd505da5a83fe8aad57a3564d"
]
],
"content": "Adds a global --nsec-file PATH option for non-interactive agents and CI. It rejects symlinks, non-regular files, unsafe Unix permissions, empty/oversized/multiline content, and conflicts with --nsec. The file is read without persisting its value to git config. Includes focused CLI tests and credential-storage documentation.",
"sig": "055b0ef2824a471dc55c21bdee3e408df001abd7c81c40fb9961362019b466a12b7611a9d93921f4856497eb88a565eb58031219fbe505e9c22c40cc3a9438cc"
}