helm/scripts at dafeb1541ba95b4afd2eeef2f99b1582d7bcb50f - helm

History

Josh Dolitsky 6898ad1457 Add GPG signature verification to install script (#7944 ) * Add GPG signature verification to install script The script fetches the KEYS file from GitHub, as well as the .asc files on the release and verifies the release artifacts are signed by a valid key. Added new boolean config options in the install script which allow for fine-grained control over verification and output: - DEBUG: sets -x in the bash script (default: false) - VERIFY_CHECKSUM: verifies checksum (default: true) - VERIFY_SIGNATURE: verifies signature (default: true) Also reduced check for curl/wget to only one time. Resolves #7943. Resolves #7838. Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * disable signature verification by default Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * remove repeated line Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * fix typo Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * do not auto-import GPG keys Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * silence errors about missing commands Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * use a temporary gpg keyring Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * Fix wget commands for VERIFY_SIGNATURES=true Signed-off-by: jdolitsky <393494+jdolitsky@users.noreply.github.com>		4 years ago
..
coverage.sh	fix(coverage): use `go list` instead of `godir`	5 years ago
get	darwin-386 and windows-386 are not supported now	4 years ago
get-helm-3	Add GPG signature verification to install script (#7944 )	4 years ago
release-notes.sh	Correct checksum file links	4 years ago
sync-repo.sh	change copyright to "Copyright The Helm Authors"	6 years ago
util.sh	change copyright to "Copyright The Helm Authors"	6 years ago
validate-license.sh	fix(tests): mapfile is not available on MacOS	5 years ago