sneak
4a2060087d
- Implement gpgVerify function that creates a temporary keyring to verify detached signatures against embedded public keys - Signature verification happens during deserialization after hash validation but before decompression - Extract signatureString() as a method on manifest for generating the canonical signature string (MAGIC-UUID-MULTIHASH) - Add --require-signature flag to check command to mandate signature from a specific GPG key ID - Expose IsSigned() and Signer() methods on Checker for signature status |
||
|---|---|---|
| .. | ||
| check.go | ||
| entry_test.go | ||
| entry.go | ||
| fetch_test.go | ||
| fetch.go | ||
| freshen_test.go | ||
| freshen.go | ||
| gen.go | ||
| list.go | ||
| mfer.go | ||