gopass-audit
Analyze gopass structure and identify entries that could be consolidated while protecting OTP entries.
Overview
gopass-audit is a read-only tool that examines your gopass store and identifies:
-
Entries that could be consolidated into YAML structures
-
OTP entries that must remain separate
-
Directories with multiple related entries
Location: ~/atelier/_projects/personal/dotfiles-optimus/bin/gopass-audit
Lines: 414
Created: 2026-03-18
Installation
# Option 1: Symlink to PATH
ln -sf ~/atelier/_projects/personal/dotfiles-optimus/bin/gopass-audit ~/.local/bin/
# Option 2: Using stow (symlinks entire bin/)
stow -d ~/atelier/_projects/personal/dotfiles-optimus -t ~ bin
# Verify
gopass-audit --help
Usage
# Audit default path (v3/personal/)
gopass-audit
# Audit specific path
gopass-audit v3/personal/banking
# Generate markdown report
gopass-audit --report
gopass-audit --report v3/personal/health
Output Sections
Summary
Total counts of entry types:
Total entries: 45
.meta files: 3
OTP entries: 12 (KEEP SEPARATE)
YAML structured: 8 (already optimized)
Flat/simple: 22 (potential consolidation)
OTP Entries (Protected)
Lists all entries that enable gopass otp:
⚠ These entries enable 'gopass otp' - keep them separate
v3/personal/banking/chase-otp
└─ pairs with: v3/personal/banking/chase
v3/personal/email/gmail-otp
└─ pairs with: v3/personal/email/gmail
Consolidation Analysis
Groups entries by directory and suggests which could be combined:
v3/personal/housing/prospective
Current entries (3):
• north-hills-1 (8 lines)
• north-hills-2 (6 lines)
• downtown-apt (7 lines)
→ Could consolidate: north-hills-1 north-hills-2 downtown-apt
Recommendations
Guidance on what to keep separate vs consolidate.
OTP Detection
The tool identifies OTP entries by:
-
Name patterns:
-otp,/otp,-totpsuffixes -
Content patterns: Lines starting with
otpauth://,otp:, ortotp:
These entries are protected - the tool will never suggest consolidating them.
Report Mode
Generate a markdown report for documentation:
gopass-audit --report v3/personal/
Creates: ~/gopass-audit-YYYYMMDD-HHMMSS.md
Safety
This tool is read-only:
-
Does NOT modify any entries
-
Does NOT delete anything
-
Only reads entry names and content for analysis
-
Safe to run at any time
Related
-
Personal Docs Generator - Create new structured entries
-
Migration Helper - Safely consolidate entries