sneak 1ec0c24149 Refuse an empty --require-signature or --sign-key (closes #205) ...

check, fetch, gen and freshen took --require-signature or --sign-key
given an empty value, on the command line or through
MFER_REQUIRE_SIGNATURE or MFER_SIGN_KEY, as the flag not given, so an
unset shell variable skipped the signature check or the signing. Each
now asks whether the flag was given, as gen's --output does. An empty
fingerprint is refused as one of the wrong length, by fetch before it
requests anything; an empty --sign-key is refused, naming the flag,
before any file is read.

Model: opus-5-5

2026-10-13 19:08:53 +00:00

..

testdata

Raise Go to the latest release, update dependencies, use the standard library uuid, add a vulnerability check (closes #102)

2026-10-06 20:26:15 +02:00

check.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-13 19:08:53 +00:00

entry_test.go

Log failed files at error level so check -q shows them (closes #195)

2026-10-13 16:46:13 +02:00

entry.go

Limit how much fetch and check read for a manifest or a file (closes #168)

2026-10-07 14:25:45 +02:00

errmsg_test.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

export_test.go

Record file mode in the manifest, 0000 unless asked (closes #161)

2026-10-06 11:43:18 +02:00

export.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

fetch_test.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

fetch.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-13 19:08:53 +00:00

freshen_test.go

Refuse a file entry with no hash when loading a manifest (closes #194)

2026-10-13 18:04:47 +02:00

freshen.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-13 19:08:53 +00:00

gen.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-13 19:08:53 +00:00

list.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

manifest_loader.go

Resolve check and freshen paths against the manifest's directory (closes #177)

2026-10-07 17:28:38 +02:00

mfer.go

Read options after the path or URL and refuse a second argument (closes #196)

2026-10-13 14:21:56 +02:00

mtime.go

Update golangci-lint to v2.12.2 with canonical config (closes #60)

2026-08-10 16:06:12 +02:00

pipe_test.go

Read only regular files in gen, freshen and check (closes #189)

2026-10-13 16:39:09 +02:00

signing_test.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-13 19:08:53 +00:00

signing.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00