sneak a89659d967 Enforce real timeouts on gpg subprocess calls (closes #62) ...

Every gpg run now has a one-minute deadline (gpgTimeout) on top of its
caller's context and is killed when either ends. A timeout is reported
as "gpg timed out" under the failing operation instead of "signal:
killed". Only gpg itself is killed; WaitDelay (one second) stops the run
from waiting on a process gpg left behind that still holds its output,
such as a wrapper script that does not exec the real gpg.
Builder.Build and Checker.ExtractEmbeddedSigningKeyFP take a context, so
ToManifest's context now reaches signing and the contextcheck
suppression calling signing non-cancellable is gone. Manifest loading
takes no context, so its signature check is bounded by the timeout
alone.

Model: opus-5-5

2026-10-04 01:33:35 +00:00

..

bork

Update golangci-lint to v2.12.2 with canonical config (closes #60)

2026-08-10 16:06:12 +02:00

cli

Enforce real timeouts on gpg subprocess calls (closes #62)

2026-10-04 01:33:35 +00:00

log

Rewrite script/test to the canonical race-enabled pattern (closes #67)

2026-09-21 15:17:50 +02:00