You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Scott Rigby
9ea35da0d0
[HIP-0026] Plugin packaging, signing, and verification (#31176)
* Plugin packaging, signing and verification
Signed-off-by: Scott Rigby <scott@r6by.com>
* wrap keyring read error with more explicit message
Co-authored-by: Jesse Simpson <jesse.simpson36@gmail.com>
Signed-off-by: Scott Rigby <scott@r6by.com>
* skip unnecessary check
Co-authored-by: Evans Mungai <mbuevans@gmail.com>
Signed-off-by: Scott Rigby <scott@r6by.com>
* Change behavior for installing plugin with missing .prov file (now warns and continues instead of failing)
Signed-off-by: Scott Rigby <scott@r6by.com>
* Add comprehensive plugin verification tests
- Test missing .prov files (warns but continues)
- Test invalid .prov file formats (fails verification)
- Test hash mismatches in .prov files (fails verification)
- Test .prov file access errors (fails appropriately)
- Test directory plugins don't support verification
- Test installation without verification enabled (succeeds)
- Test with valid .prov files (fails on empty keyring as expected)
---------
Signed-off-by: Scott Rigby <scott@r6by.com>
Co-authored-by: Jesse Simpson <jesse.simpson36@gmail.com>
Co-authored-by: Evans Mungai <mbuevans@gmail.com>
|
5 months ago |
| .. |
|
cache
|
…
|
|
|
installer
|
[HIP-0026] Plugin packaging, signing, and verification (#31176)
|
5 months ago |
|
schema
|
…
|
|
|
testdata
|
…
|
|
|
config.go
|
…
|
|
|
descriptor.go
|
…
|
|
|
doc.go
|
…
|
|
|
error.go
|
…
|
|
|
loader.go
|
…
|
|
|
loader_test.go
|
…
|
|
|
metadata.go
|
…
|
|
|
metadata_legacy.go
|
…
|
|
|
metadata_test.go
|
…
|
|
|
metadata_v1.go
|
…
|
|
|
plugin.go
|
…
|
|
|
plugin_test.go
|
…
|
|
|
plugin_type_registry.go
|
…
|
|
|
plugin_type_registry_test.go
|
…
|
|
|
runtime.go
|
…
|
|
|
runtime_extismv1.go
|
…
|
|
|
runtime_extismv1_test.go
|
…
|
|
|
runtime_subprocess.go
|
…
|
|
|
runtime_subprocess_getter.go
|
…
|
|
|
runtime_subprocess_hooks.go
|
…
|
|
|
runtime_subprocess_test.go
|
…
|
|
|
runtime_test.go
|
…
|
|
|
sign.go
|
[HIP-0026] Plugin packaging, signing, and verification (#31176)
|
5 months ago |
|
sign_test.go
|
[HIP-0026] Plugin packaging, signing, and verification (#31176)
|
5 months ago |
|
signing_info.go
|
[HIP-0026] Plugin packaging, signing, and verification (#31176)
|
5 months ago |
|
subprocess_commands.go
|
…
|
|
|
subprocess_commands_test.go
|
…
|
|
|
verify.go
|
[HIP-0026] Plugin packaging, signing, and verification (#31176)
|
5 months ago |
|
verify_test.go
|
[HIP-0026] Plugin packaging, signing, and verification (#31176)
|
5 months ago |