5 Commits (a7a6a5e3b09f1ceacfb582aaf1f94eddd22bea03)

Author	SHA1	Message	Date
Scott Rigby	e814ff3c38	Remove unnecessary file i/o operations from signing and verifying ... Signed-off-by: Scott Rigby <scott@r6by.com>	1 month ago
Scott Rigby	9ea35da0d0	[HIP-0026] Plugin packaging, signing, and verification (#31176) ... * Plugin packaging, signing and verification Signed-off-by: Scott Rigby <scott@r6by.com> * wrap keyring read error with more explicit message Co-authored-by: Jesse Simpson <jesse.simpson36@gmail.com> Signed-off-by: Scott Rigby <scott@r6by.com> * skip unnecessary check Co-authored-by: Evans Mungai <mbuevans@gmail.com> Signed-off-by: Scott Rigby <scott@r6by.com> * Change behavior for installing plugin with missing .prov file (now warns and continues instead of failing) Signed-off-by: Scott Rigby <scott@r6by.com> * Add comprehensive plugin verification tests - Test missing .prov files (warns but continues) - Test invalid .prov file formats (fails verification) - Test hash mismatches in .prov files (fails verification) - Test .prov file access errors (fails appropriately) - Test directory plugins don't support verification - Test installation without verification enabled (succeeds) - Test with valid .prov files (fails on empty keyring as expected) --------- Signed-off-by: Scott Rigby <scott@r6by.com> Co-authored-by: Jesse Simpson <jesse.simpson36@gmail.com> Co-authored-by: Evans Mungai <mbuevans@gmail.com>	1 month ago
Scott Rigby	5c663db853	Plugin tarball installer support for HTTP (fix) and local (feat) ... Signed-off-by: Scott Rigby <scott@r6by.com>	1 month ago
Scott Rigby	d19130f69e	Fix file handle management in tar extractors ... Use defer outFile.Close() to avoid multiple close calls and ensure proper resource cleanup Co-authored-by: Andrew Block <andy.block@gmail.com> Signed-off-by: Scott Rigby <scott@r6by.com>	1 month ago
George Jenkins	a1c84f9a4c	Move pkg/plugin -> internal/plugin ... Signed-off-by: George Jenkins <gvjenkins@gmail.com>	2 months ago