10 Commits (9dab6e977015cb92bf61c1f93a35316cae5e2462)

Author	SHA1	Message	Date
Matt Farina	4e7e939f19	Updating the Go version in go.mod ... At this time both Go 1.19 and 1.20 are supported. The version specified in the go.mod file is the minimum version we expect Helm to be compiled against. This is the oldest supported version to support environments where others compile Helm. The Helm project is using Go 1.20 to build Helm itself. Updating to Go 1.19 also includes dealing with io/ioutil deprecation and some additional linting issues around staticcheck. All the staticcheck issues were in test files so linting was skipped for those. Signed-off-by: Matt Farina <matt.farina@suse.com>	2 years ago
Ashley Davis	0ab44aef70	add more error checks during the signing process ... Before this change, several of the potential errors during the process of signing a package were skipped. Crucially, `Close()`ing the ReadCloser from the gpg clearsigner is the call which actually does the signing, and so has several points of failure which are ignored; for example, if there's a problem with the format of the key. Also changes the error from messageBlock() to be propagated rather than being swallowed, and adds a test for the case where a signer fails to sign. Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>	3 years ago
Josh Dolitsky	889c70b729	Add nolint comments ... Signed-off-by: Josh Dolitsky <josh@dolit.ski>	3 years ago
Adam Reese	e458a67f0c	ref(pkg/chart): add validation method to chart ... Consolidate validation of Chart.yaml. Signed-off-by: Adam Reese <adam@reese.io>	6 years ago
Adam Reese	4f26b658d8	change copyright to "Copyright The Helm Authors"	6 years ago
Matt Butcher	9ae97c341c	fix(helm): read passphrase from prompt ... This prompts the user to enter a passphrase if the given PGP key is encrypted. Closes #1447	8 years ago
Matt Butcher	1c6fc9c0e8	feat(helm): remove the requirement that fetch/install need version ... This removes the requirement that a fetch or install command must explicitly state the version number to install. Instead, this goes to the strategy used by OS package managers: Install the latest until told to do otherwise. Closes #1198	8 years ago
Matt Butcher	a5921faf99	feat(chartutils): add support for requirements.yaml	8 years ago
Matt Butcher	f1d07c3f11	feat(helm): add --verify flag to commands ... This adds the --verify and --keyring flags to: helm fetch helm inspect helm install helm upgrade Each of these commands can now make cryptographic verification a prerequisite for using a chart.	8 years ago
Matt Butcher	ce83a8a777	feat(pkg/provenance): add OpenPGP signatures ... This adds support for OpenPGP signatures containing provenance data. Such information can be used to verify the integrity of a Chart by testing that its file hash, metadata, and images are correct. This first PR does not contain all of the tooling necessary for end-to-end chart integrity. It contains just the library. See #983	8 years ago