Boris Kreitchman

Sort masterkeys to try offline decrypt methods first

1

This is to address #305. Sort master keys so PGP/age keys appear before the others and being used first.

This PR will add `--recursive` flag to recursively diff encountered Kustomizations similar to discussions https://github.com/fluxcd/flux2/discussions/2466, https://github.com/fluxcd/flux2/discussions/2434, https://github.com/fluxcd/flux2/discussions/820. (Currently it doesn't expand HelmReleases, probably could be added later). Sources of additional...

Diff secrets

2

This PR will add `--decrypt-secrets` flag to decrypt SOPS secrets in diff command so the changes could be detected also in values: ``` ► Secret/default/podinfo-token-77t89m9b67 drifted data.token ± value change...

go/analysis/passes/shadow: separate package-level variables logic

17

Span-based shadow detection across multiple files may produce inconsistent results due to changes in filename ordering and map iteration. Since only package-level variables can be shadowed cross-file, this PR handles...

go/analysis/passes/shadow: include filename in cross-file shadow error messages

31

Improve shadow analyzer error messages to include the filename when the shadowed declaration is in a different file. Fixes golang/go#74843