check / check (push) Waiting to run
mfer ran the gpg binary to sign, export keys and verify, so it failed wherever gpg is missing. It now uses github.com/ProtonMail/go-crypto/openpgp. --sign-key and MFER_SIGN_KEY name a file holding one version 4 OpenPGP secret key; a protected key's passphrase comes from MFER_SIGN_KEY_PASSPHRASE or a terminal prompt. gen and freshen check that the key can sign before they read any file. Verification keeps the rules of the --require-signature fix: one primary key in the embedded block, counted from its packets, exactly one signature, made by that key or a subkey, and signer equal to its fingerprint. The embedded block may hold no DSA key and no secret key, and an armored field must be one well-formed block. Model: opus-5-5
32 lines
987 B
AMPL
32 lines
987 B
AMPL
module sneak.berlin/go/mfer
|
|
|
|
go 1.27.1
|
|
|
|
require (
|
|
github.com/ProtonMail/go-crypto v1.5.2
|
|
github.com/creack/pty v1.1.25-0.20260601142114-9246436fffe8
|
|
github.com/davecgh/go-spew v1.1.1
|
|
github.com/dustin/go-humanize v1.1.0
|
|
github.com/klauspost/compress v1.20.1
|
|
github.com/multiformats/go-multihash v0.2.3
|
|
github.com/spf13/afero v1.15.0
|
|
github.com/stretchr/testify v1.12.1
|
|
github.com/urfave/cli/v3 v3.14.0
|
|
golang.org/x/term v0.46.0
|
|
google.golang.org/protobuf v1.36.12
|
|
)
|
|
|
|
require (
|
|
github.com/cloudflare/circl v1.6.3 // indirect
|
|
github.com/klauspost/cpuid/v2 v2.4.0 // indirect
|
|
github.com/minio/sha256-simd v1.0.1 // indirect
|
|
github.com/mr-tron/base58 v1.3.0 // indirect
|
|
github.com/multiformats/go-varint v0.1.0 // indirect
|
|
github.com/spaolacci/murmur3 v1.1.0 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.5 // indirect
|
|
golang.org/x/crypto v0.57.0 // indirect
|
|
golang.org/x/sys v0.48.0 // indirect
|
|
golang.org/x/text v0.42.0 // indirect
|
|
lukechampine.com/blake3 v1.4.1 // indirect
|
|
)
|