sneak ee49371459 Enforce real timeouts on gpg subprocess calls (closes #62) ...

Every gpg run now has a one-minute deadline (gpgTimeout) on top of its
caller's context and is killed when either ends. A timeout is reported
as "gpg timed out" under the failing operation instead of "signal:
killed". Builder.Build and Checker.ExtractEmbeddedSigningKeyFP take a
context, so ToManifest's context now reaches signing and the
contextcheck suppression calling signing non-cancellable is gone.
Manifest loading takes no context, so its signature check is bounded by
the timeout alone. Killing gpg itself is enough: the gpg-agent it starts
runs detached and holds none of its output.

Model: opus-5-5

2026-10-03 15:37:23 +00:00

..

bork

Update golangci-lint to v2.12.2 with canonical config (closes #60)

2026-08-10 16:06:12 +02:00

cli

Enforce real timeouts on gpg subprocess calls (closes #62)

2026-10-03 15:37:23 +00:00

log

Rewrite script/test to the canonical race-enabled pattern (closes #67)

2026-09-21 15:17:50 +02:00