clawbot 6540e5f285 Refuse an empty --require-signature or --sign-key (closes #205) ...

check, fetch, gen and freshen took --require-signature or --sign-key
given an empty value, on the command line or through
MFER_REQUIRE_SIGNATURE or MFER_SIGN_KEY, as the flag not given, so an
unset shell variable skipped the signature check or the signing. Each
now asks whether the flag was given, as gen's --output does. An empty
fingerprint is refused as one of the wrong length, by fetch before it
requests anything; an empty --sign-key is refused, naming the flag,
before any file is read.

Model: opus-5-5

2026-10-14 00:01:30 +02:00

..

testdata

Raise Go to the latest release, update dependencies, use the standard library uuid, add a vulnerability check (closes #102)

2026-10-06 20:26:15 +02:00

check.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-14 00:01:30 +02:00

entry_test.go

Report only symlinks to regular files as extra files in check (closes #192)

2026-10-14 00:00:53 +02:00

entry.go

Take the version from the git tag, not a constant (closes #80)

2026-10-14 00:00:35 +02:00

errmsg_test.go

Hold runMu in internal/cli tests that log outside a CLI run (closes #210)

2026-10-14 00:00:14 +02:00

export_test.go

Hold runMu in internal/cli tests that log outside a CLI run (closes #210)

2026-10-14 00:00:14 +02:00

export.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

fetch_test.go

Send fetch progress at most once per second (closes #206)

2026-10-14 00:01:21 +02:00

fetch.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-14 00:01:30 +02:00

freshen_test.go

Hold runMu in internal/cli tests that log outside a CLI run (closes #210)

2026-10-14 00:00:14 +02:00

freshen.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-14 00:01:30 +02:00

gen.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-14 00:01:30 +02:00

list.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

manifest_loader.go

Resolve check and freshen paths against the manifest's directory (closes #177)

2026-10-07 17:28:38 +02:00

mfer.go

Read a path or URL named help or h as an argument (closes #198)

2026-10-14 00:00:44 +02:00

mtime.go

Update golangci-lint to v2.12.2 with canonical config (closes #60)

2026-08-10 16:06:12 +02:00

pipe_test.go

Read only regular files in gen, freshen and check (closes #189)

2026-10-13 16:39:09 +02:00

signing_test.go

Refuse an empty --require-signature or --sign-key (closes #205)

2026-10-14 00:01:30 +02:00

signing.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00