James Coleman
2889766a20
Some checks failed
Go package / build (push) Has been cancelled
- Reject RPM, Debian, and Arch metadata that fails the configured signature policy before trusting its checksums or package paths. - Preserve the last verified repository generation when signed metadata rotates inconsistently or required files remain unavailable. - Let operators pin signer keyrings or retrieve unknown issuers from configured keyservers, including archived GnuPG v1 RSA signatures. - Gate cached server entry points and package misses until a crawl completes under the active signature policy. |
||
|---|---|---|
| .. | ||
| apk.go | ||
| apk_test.go | ||
| arch.go | ||
| arch_test.go | ||
| control.go | ||
| control_test.go | ||
| deb.go | ||
| deb_test.go | ||
| discover.go | ||
| discover_cache.go | ||
| discover_cache_test.go | ||
| discover_test.go | ||
| mirror_test.go | ||
| options.go | ||
| options_test.go | ||
| resolve.go | ||
| resolve_test.go | ||
| rpm.go | ||
| rpm_test.go | ||
| signature.go | ||
| signature_test.go | ||
| sync.go | ||
| sync_test.go | ||
| trace.go | ||
| trace_test.go | ||