sneak 953fca87f9 Refuse a file whose size changed between freshen's scan and hash (closes #207) ...

freshen took a changed or new file's size from the scan and its hash
from a later read, without comparing the bytes read with that size. A
file that grew or shrank in between got an entry no content can match,
so check failed it with nothing saying why. processEntry now fails with
a size mismatch naming the file, as gen does, so freshen exits 1 and
leaves the manifest as it was.

Judgement call: the error wraps the package's existing errSizeMismatch
from fetch; its comment now covers both uses.

Model: opus-5-5

2026-10-13 19:06:16 +00:00

..

testdata

Raise Go to the latest release, update dependencies, use the standard library uuid, add a vulnerability check (closes #102)

2026-10-06 20:26:15 +02:00

check.go

Log failed files at error level so check -q shows them (closes #195)

2026-10-13 16:46:13 +02:00

entry_test.go

Log failed files at error level so check -q shows them (closes #195)

2026-10-13 16:46:13 +02:00

entry.go

Limit how much fetch and check read for a manifest or a file (closes #168)

2026-10-07 14:25:45 +02:00

errmsg_test.go

Refuse a file whose size changed between freshen's scan and hash (closes #207)

2026-10-13 19:06:16 +00:00

export_test.go

Record file mode in the manifest, 0000 unless asked (closes #161)

2026-10-06 11:43:18 +02:00

export.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

fetch_test.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

fetch.go

Refuse a file whose size changed between freshen's scan and hash (closes #207)

2026-10-13 19:06:16 +00:00

freshen_test.go

Refuse a file whose size changed between freshen's scan and hash (closes #207)

2026-10-13 19:06:16 +00:00

freshen.go

Refuse a file whose size changed between freshen's scan and hash (closes #207)

2026-10-13 19:06:16 +00:00

gen.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

list.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

manifest_loader.go

Resolve check and freshen paths against the manifest's directory (closes #177)

2026-10-07 17:28:38 +02:00

mfer.go

Read options after the path or URL and refuse a second argument (closes #196)

2026-10-13 14:21:56 +02:00

mtime.go

Update golangci-lint to v2.12.2 with canonical config (closes #60)

2026-08-10 16:06:12 +02:00

pipe_test.go

Read only regular files in gen, freshen and check (closes #189)

2026-10-13 16:39:09 +02:00

signing_test.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00

signing.go

Sign and verify manifests in Go with OpenPGP instead of running gpg (closes #181)

2026-10-08 09:42:45 +02:00