gopass-audit

Analyze gopass structure and identify entries that could be consolidated while protecting OTP entries.

Overview

gopass-audit is a read-only tool that examines your gopass store and identifies:

  • Entries that could be consolidated into YAML structures

  • OTP entries that must remain separate

  • Directories with multiple related entries

Location: ~/atelier/_projects/personal/dotfiles-optimus/bin/gopass-audit

Lines: 414

Created: 2026-03-18

Installation

# Option 1: Symlink to PATH
ln -sf ~/atelier/_projects/personal/dotfiles-optimus/bin/gopass-audit ~/.local/bin/

# Option 2: Using stow (symlinks entire bin/)
stow -d ~/atelier/_projects/personal/dotfiles-optimus -t ~ bin

# Verify
gopass-audit --help

Usage

# Audit default path (v3/personal/)
gopass-audit

# Audit specific path
gopass-audit v3/personal/banking

# Generate markdown report
gopass-audit --report
gopass-audit --report v3/personal/health

Output Sections

Summary

Total counts of entry types:

Total entries:     45
.meta files:       3
OTP entries:       12 (KEEP SEPARATE)
YAML structured:   8 (already optimized)
Flat/simple:       22 (potential consolidation)

OTP Entries (Protected)

Lists all entries that enable gopass otp:

⚠ These entries enable 'gopass otp' - keep them separate

  v3/personal/banking/chase-otp
    └─ pairs with: v3/personal/banking/chase
  v3/personal/email/gmail-otp
    └─ pairs with: v3/personal/email/gmail

Consolidation Analysis

Groups entries by directory and suggests which could be combined:

v3/personal/housing/prospective
  Current entries (3):
    • north-hills-1 (8 lines)
    • north-hills-2 (6 lines)
    • downtown-apt (7 lines)
  → Could consolidate: north-hills-1 north-hills-2 downtown-apt

Recommendations

Guidance on what to keep separate vs consolidate.

OTP Detection

The tool identifies OTP entries by:

  1. Name patterns: -otp, /otp, -totp suffixes

  2. Content patterns: Lines starting with otpauth://, otp:, or totp:

These entries are protected - the tool will never suggest consolidating them.

Report Mode

Generate a markdown report for documentation:

gopass-audit --report v3/personal/

Creates: ~/gopass-audit-YYYYMMDD-HHMMSS.md

Safety

This tool is read-only:

  • Does NOT modify any entries

  • Does NOT delete anything

  • Only reads entry names and content for analysis

  • Safe to run at any time