CLI tool for accessing strongbox-password-safe
- Go 99.4%
- Makefile 0.6%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
Nicolas Karolak
597e6d33c4
The --verbose flag was only used once, to log the socket path in dialStrongbox via vlog(). This single log line added no real debugging value. Remove the flag, the vlog helper, and log.go to simplify the surface. |
||
| .gitignore | ||
| .semrel.yaml | ||
| commands.go | ||
| crypto.go | ||
| go.mod | ||
| go.sum | ||
| main.go | ||
| Makefile | ||
| prek.toml | ||
| protocol.go | ||
| protocol_test.go | ||
| README.md | ||
| transport.go | ||
strongbox-cli (Go)
Go rewrite of strongbox-cli, connecting directly to Strongbox on macOS via its Unix domain socket.
Install
Requires Go 1.22+ and macOS.
go install git.karolak.fr/nicolas/strongbox-cli@latest
Usage
strongbox-cli diagnose # health-check integration
strongbox-cli diagnose --brief # just list databases
strongbox-cli list # list databases and lock state
strongbox-cli search "github" # full-text search
strongbox-cli get <uuid-or-title> # show entry (public view)
strongbox-cli get --reveal <ref> # show secrets too
strongbox-cli get --field password <ref> # print only the password
strongbox-cli get --field totp-uri <ref> # print the raw otpauth:// URI
strongbox-cli get --database <db> <ref> # search only one database
strongbox-cli unlock <db> # unlock database
strongbox-cli lock --all # lock all databases
Security
- Any process running as your macOS user can connect to Strongbox while vaults are unlocked. This is the same trust boundary as the browser extension.