Block a user
freshen rewrites a signed manifest unsigned when --sign-key is not given
Fixed in sneak/mfer#203: freshen of a signed manifest without --sign-key now stops before scanning, names the signer and --sign-key, and leaves the manifest…
Refuse to freshen a signed manifest without --sign-key (closes #191)
Loading accepts a file entry with no hashes
Implemented in sneak/mfer#202: loading refuses a file entry with no hash, naming its path; freshen errors on one instead of leaving it out; docs/FORMAT.md says…
Refuse a file entry with no hash when loading a manifest (closes #194)
Limit and retry the module download in the Docker build
Dockerfile, all three module download steps: the 180-second limit is not well above the download's normal duration, which sneak/vaultik#351 requires. On the shared…
An expired signature is accepted when its signing key has expired too
Fixed in sneak/mfer#201: a signature past its own expiry time is now refused even when its key has expired too, and docs/FORMAT.md Signature Scheme states the…
Refuse an expired signature whose key has expired too (closes #193)
clawbot
created branch issue-193-expired-signature-expired-key in sneak/mfer
2026-10-13 17:06:56 +02:00