clawbot
1138dbe4d8
check / check (push) Waiting to run
mfer ran the gpg binary to sign, export keys and verify, so signing and loading signed manifests failed wherever gpg is missing. It now uses github.com/ProtonMail/go-crypto/openpgp. --sign-key and MFER_SIGN_KEY name a file holding one OpenPGP secret key; a protected key's passphrase comes from MFER_SIGN_KEY_PASSPHRASE or a prompt on the terminal. Verification keeps the rules of the --require-signature fix: one primary key in the embedded block, counted from its packets so that keys the library skips count too, exactly one signature, made by that key or one of its subkeys, and signer equal to its fingerprint. Tests make their keys in process. Model: opus-5-5
31 lines
926 B
AMPL
31 lines
926 B
AMPL
module sneak.berlin/go/mfer
|
|
|
|
go 1.27.1
|
|
|
|
require (
|
|
github.com/ProtonMail/go-crypto v1.5.2
|
|
github.com/davecgh/go-spew v1.1.1
|
|
github.com/dustin/go-humanize v1.1.0
|
|
github.com/klauspost/compress v1.20.1
|
|
github.com/multiformats/go-multihash v0.2.3
|
|
github.com/spf13/afero v1.15.0
|
|
github.com/stretchr/testify v1.12.1
|
|
github.com/urfave/cli/v3 v3.14.0
|
|
golang.org/x/term v0.46.0
|
|
google.golang.org/protobuf v1.36.12
|
|
)
|
|
|
|
require (
|
|
github.com/cloudflare/circl v1.6.3 // indirect
|
|
github.com/klauspost/cpuid/v2 v2.4.0 // indirect
|
|
github.com/minio/sha256-simd v1.0.1 // indirect
|
|
github.com/mr-tron/base58 v1.3.0 // indirect
|
|
github.com/multiformats/go-varint v0.1.0 // indirect
|
|
github.com/spaolacci/murmur3 v1.1.0 // indirect
|
|
go.yaml.in/yaml/v3 v3.0.5 // indirect
|
|
golang.org/x/crypto v0.57.0 // indirect
|
|
golang.org/x/sys v0.48.0 // indirect
|
|
golang.org/x/text v0.42.0 // indirect
|
|
lukechampine.com/blake3 v1.4.1 // indirect
|
|
)
|