9 Commits (965f8591e7eab685186626bf7e64b4c24b384c39)

Author	SHA1	Message	Date
Ashley Davis	0ab44aef70	add more error checks during the signing process ... Before this change, several of the potential errors during the process of signing a package were skipped. Crucially, `Close()`ing the ReadCloser from the gpg clearsigner is the call which actually does the signing, and so has several points of failure which are ignored; for example, if there's a problem with the format of the key. Also changes the error from messageBlock() to be propagated rather than being swallowed, and adds a test for the case where a signer fails to sign. Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>	3 years ago
Josh Dolitsky	889c70b729	Add nolint comments ... Signed-off-by: Josh Dolitsky <josh@dolit.ski>	3 years ago
Adam Reese	e458a67f0c	ref(pkg/chart): add validation method to chart ... Consolidate validation of Chart.yaml. Signed-off-by: Adam Reese <adam@reese.io>	6 years ago
Adam Reese	4f26b658d8	change copyright to "Copyright The Helm Authors"	6 years ago
Matt Butcher	9ae97c341c	fix(helm): read passphrase from prompt ... This prompts the user to enter a passphrase if the given PGP key is encrypted. Closes #1447	8 years ago
Matt Butcher	1c6fc9c0e8	feat(helm): remove the requirement that fetch/install need version ... This removes the requirement that a fetch or install command must explicitly state the version number to install. Instead, this goes to the strategy used by OS package managers: Install the latest until told to do otherwise. Closes #1198	8 years ago
Matt Butcher	a5921faf99	feat(chartutils): add support for requirements.yaml	8 years ago
Matt Butcher	f1d07c3f11	feat(helm): add --verify flag to commands ... This adds the --verify and --keyring flags to: helm fetch helm inspect helm install helm upgrade Each of these commands can now make cryptographic verification a prerequisite for using a chart.	8 years ago
Matt Butcher	ce83a8a777	feat(pkg/provenance): add OpenPGP signatures ... This adds support for OpenPGP signatures containing provenance data. Such information can be used to verify the integrity of a Chart by testing that its file hash, metadata, and images are correct. This first PR does not contain all of the tooling necessary for end-to-end chart integrity. It contains just the library. See #983	8 years ago