James Coleman
2889766a20
Some checks failed
Go package / build (push) Has been cancelled
- Reject RPM, Debian, and Arch metadata that fails the configured signature policy before trusting its checksums or package paths. - Preserve the last verified repository generation when signed metadata rotates inconsistently or required files remain unavailable. - Let operators pin signer keyrings or retrieve unknown issuers from configured keyservers, including archived GnuPG v1 RSA signatures. - Gate cached server entry points and package misses until a crawl completes under the active signature policy. |
||
|---|---|---|
| .. | ||
| classify.go | ||
| classify_test.go | ||
| crawl_loop.go | ||
| failure_cache.go | ||
| http.go | ||
| main_test.go | ||
| serve.go | ||
| serve_test.go | ||
| trace_test.go | ||