trust

package

v0.6.20 Latest Latest Go to latest Published: Jul 27, 2026 License: MIT Imports: 13 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/floegence/redevplugin

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func CanonicalPackageSignaturePayload(sig pluginpkg.PackageSignature) ([]byte, error)
func SignatureForPackage(pkg pluginpkg.Package, keyID string, publisherID string, pluginID string, ...) (pluginpkg.PackageSignature, error)
type Ed25519Verifier
type KeyLookupRequest
type Keyring
type SigningKey
type StaticKeyring
- func (k StaticKeyring) LookupPackageSigningKey(_ context.Context, req KeyLookupRequest) (SigningKey, error)

Constants ¶

View Source

const AlgorithmEd25519 = pluginpkg.PackageSignatureAlgorithmEd25519

Variables ¶

View Source

var (
	ErrKeyringRequired      = errors.New("package signing keyring is required")
	ErrKeyNotFound          = errors.New("package signing key not found")
	ErrKeyRevoked           = errors.New("package signing key is revoked")
	ErrPublicKeyInvalid     = errors.New("package signing public key is invalid")
	ErrSignatureRequired    = errors.New("package signature is required")
	ErrUnsupportedAlgorithm = errors.New("package signature algorithm is unsupported")
	ErrSignatureInvalid     = errors.New("package signature is invalid")
)

Functions ¶

func CanonicalPackageSignaturePayload ¶

func CanonicalPackageSignaturePayload(sig pluginpkg.PackageSignature) ([]byte, error)

func SignatureForPackage ¶

func SignatureForPackage(pkg pluginpkg.Package, keyID string, publisherID string, pluginID string, privateKey ed25519.PrivateKey, signedAt time.Time) (pluginpkg.PackageSignature, error)

Types ¶

type Ed25519Verifier ¶

type Ed25519Verifier struct {
	Keyring Keyring
	Now     func() time.Time
}

func (Ed25519Verifier) AssessExternalPackageSignature ¶ added in v0.6.8

func (v Ed25519Verifier) AssessExternalPackageSignature(ctx context.Context, req host.ExternalPackageSignatureAssessmentRequest) (registry.SignatureAssessment, error)

AssessExternalPackageSignature classifies signature evidence without turning optional signature verification into an installation gate. Integrity failures are returned as explicit closed states; only dependency failures use the unavailable state.

func (Ed25519Verifier) AssessExternalPackageSignatureFreshness ¶ added in v0.6.8

func (v Ed25519Verifier) AssessExternalPackageSignatureFreshness(ctx context.Context, req host.ExternalPackageSignatureFreshnessRequest) (registry.SignatureAssessment, error)

func (Ed25519Verifier) VerifyPackageTrust ¶

func (v Ed25519Verifier) VerifyPackageTrust(ctx context.Context, req host.PackageTrustVerificationRequest) (host.PackageTrustVerificationResult, error)

type KeyLookupRequest ¶

type KeyLookupRequest struct {
	Algorithm   string `json:"algorithm"`
	KeyID       string `json:"key_id"`
	PublisherID string `json:"publisher_id,omitempty"`
	PluginID    string `json:"plugin_id,omitempty"`
}

type Keyring ¶

type Keyring interface {
	LookupPackageSigningKey(ctx context.Context, req KeyLookupRequest) (SigningKey, error)
}

type SigningKey ¶

type SigningKey struct {
	Algorithm   string            `json:"algorithm"`
	KeyID       string            `json:"key_id"`
	PublisherID string            `json:"publisher_id,omitempty"`
	PluginID    string            `json:"plugin_id,omitempty"`
	PublicKey   ed25519.PublicKey `json:"-"`
	Revoked     bool              `json:"revoked,omitempty"`
	Metadata    map[string]string `json:"metadata,omitempty"`
}

type StaticKeyring ¶

type StaticKeyring struct {
	Keys []SigningKey
}

func (StaticKeyring) LookupPackageSigningKey ¶

func (k StaticKeyring) LookupPackageSigningKey(_ context.Context, req KeyLookupRequest) (SigningKey, error)

Source Files ¶

View all Source files

ed25519.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL