Add `list-gpg-user`command to list all added users

Question

Add `list-gpg-user`command to list all added users

zhiboz opened this issue 9 years ago · comments

Is it feasible to introduce a new command

git-crypt list-gpg-user

to list all added gpg users? Are there alternatives to show that info with the existing implementation?

Andrew Ayer · Answer 1 · Tue Feb 24 2015 23:50:47 GMT+0800 (China Standard Time)

Yeah, this is planned. For now, if you list the contents of the .git-crypt/keys/default/0/ directory you'll get the full GPG fingerprints of every authorized user.

Zhibo · Answer 2 · Tue Feb 24 2015 23:53:14 GMT+0800 (China Standard Time)

Cool! Greatly appreciate your efforts!

Jeff Tchang · Answer 3 · Sat May 30 2015 02:31:10 GMT+0800 (China Standard Time)

They are the fingerprints and not the actual GPG keys?

Andrew Ayer · Answer 4 · Sat May 30 2015 02:34:24 GMT+0800 (China Standard Time)

Yes, the filenames are the fingerprints, not the actual keys.

Jeff Tchang · Answer 5 · Sat May 30 2015 02:42:47 GMT+0800 (China Standard Time)

Gotcha. Is the .git-crypt directory actually encrypted as well? I don't see the need to encrypt it. Also wouldn't it make sense to store the public key as well? Or is it there and I am just missing it.

Andrew Ayer · Answer 6 · Sat May 30 2015 03:04:21 GMT+0800 (China Standard Time)

The .git-crypt directory is not encrypted by git-crypt (in fact, git-crypt installs a .gitattributes file in .git-crypt to override any rules that might cause it to be encrypted inadvertently).

That said, each file inside .git-crypt is separately encrypted, by GPG, to the public key indicated by the fingerprint in the filename. This is what allows contributors to unlock the repository using their GPG private key.

It wouldn't make sense for git-crypt to store the GPG public key. That's what the GPG keyring is for. Given a fingerprint, you can export the public key from GPG with gpg --export.

Deleted user · Answer 7 · Mon Aug 21 2017 10:44:45 GMT+0800 (China Standard Time)

I'm waiting for this feature, this's gonna be great! 👍

Aslan · Answer 8 · Thu Oct 05 2017 07:50:51 GMT+0800 (China Standard Time)

👍 for this subcommand

Constantin Bugneac · Answer 9 · Fri Mar 09 2018 19:07:19 GMT+0800 (China Standard Time)

+1 very useful feature to have

Greg Sharpe · Answer 10 · Mon Aug 06 2018 18:08:34 GMT+0800 (China Standard Time)

I found this awesome blog post! https://www.devopsgroup.com/2016/12/08/easy-git-crypt-user-identification/

Constantin Bugneac · Answer 11 · Tue Aug 07 2018 04:28:36 GMT+0800 (China Standard Time)

Thanks @GregSharpe1. Nice article!

Jake Morgan · Answer 12 · Fri Aug 31 2018 18:30:01 GMT+0800 (China Standard Time)

Wow @GregSharpe1, that's exacly what I was looking for!!

Christian Danielsen · Answer 13 · Thu Nov 01 2018 23:14:36 GMT+0800 (China Standard Time)

Just check the git log

git log .git-crypt/

Bent Terp · Answer 14 · Tue Nov 05 2019 19:54:03 GMT+0800 (China Standard Time)

git log .git-crypt/keys/*/*/*.gpg

Piotr Sobieszczański · Answer 15 · Tue Oct 20 2020 14:12:13 GMT+0800 (China Standard Time)

Create git alias to make pseudo-command git crypt-users
Add this..

[alias]
	crypt-users = ! git log  .git-crypt/keys/*/*/*.gpg | egrep '\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,6}\\b'

to your ~/.gitconfig

UPDATE: new version

[alias]
	crypt-users = "! git log --format=full .git-crypt/keys/*/*/*.gpg | grep -E '^            .+' | sed 's/ *$//g' | awk '{gsub(/^[ \t]+/,\"\"); print $0 }'"

jottr · Answer 16 · Fri Jul 23 2021 04:39:56 GMT+0800 (China Standard Time)

@AGWA is this still planned?
This feature would increase the UX and thus security by making it more transparent which users were granted access.

AlexShmel · Answer 17 · Tue Jan 11 2022 01:08:30 GMT+0800 (China Standard Time)

@AGWA Is there any updates on this issue ?

Isaac Gentz · Answer 18 · Wed May 18 2022 11:50:17 GMT+0800 (China Standard Time)

Create git alias to make pseudo-command git crypt-users Add this..

[alias]
	crypt-users = ! git log  .git-crypt/keys/*/*/*.gpg | egrep '\\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\\.[A-Za-z]{2,6}\\b'

to your ~/.gitconfig

UPDATE: new version

[alias]
	crypt-users = "! git log --format=full .git-crypt/keys/*/*/*.gpg | grep -E '^            .+' | sed 's/ *$//g' | awk '{gsub(/^[ \t]+/,\"\"); print $0 }'"

If anybody is looking for one that only lists the emails (that was what I needed anyways):

[alias]
        crypt-users = "! git log --format=full .git-crypt/keys/*/*/*.gpg | grep -E '^            .+' | sed 's/ *$//g' | awk '{gsub(/^[ \t]+/,\"\"); print $0 }' | awk 'NF>1{print $NF}' | sed 's/.//;s/.$//'"

Wow, this worked like a charm. Thank you!