Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: support verifying with minisign #2994

Merged
merged 6 commits into from
Jul 17, 2024
Merged

feat: support verifying with minisign #2994

merged 6 commits into from
Jul 17, 2024

Conversation

suzuki-shunsuke
Copy link
Member

@suzuki-shunsuke suzuki-shunsuke commented Jul 12, 2024

Close #2978

Example

packages:
  - type: http
    repo_owner: ziglang
    repo_name: zig
    description: General-purpose programming language and toolchain for maintaining robust, optimal, and reusable software
    url: https://ziglang.org/download/{{.Version}}/zig-{{.OS}}-{{.Arch}}-{{.Version}}.{{.Format}}
    format: tar.xz
    version_source: github_tag
    files:
      - name: zig
        src: zig-{{.OS}}-{{.Arch}}-{{.Version}}/zig
    minisign:
      type: http
      url: https://ziglang.org/builds/zig-{{.OS}}-{{.Arch}}-{{.Version}}.{{.Format}}.minisig
      public_key: "RWSGOq2NVecA2UPNdBUZykf1CCb147pkmdtYxgb3Ti+JO/wCYvhbAb/U"
    replacements:
      darwin: macos
      386: i386
      arm64: aarch64
      amd64: x86_64
    overrides:
      - goos: windows
        format: zip
$ aqua exec -- zig --help                                                             
INFO[0000] download and unarchive the package            aqua_version= env=darwin/arm64 exe_name=zig package_name=ziglang/zig package_version=0.13.0 program=aqua registry=standard
Downloading ziglang/zig 0.13.0   0% |                                                                                   | ( 0 B/45 MB) [0s:0s]INFO[0000] verify a package with minisign                aqua_version= env=darwin/arm64 exe_name=zig package_name=ziglang/zig package_version=0.13.0 program=aqua registry=standard
Downloading ziglang/zig 0.13.0 100% |████████████████████████████████████████████████████████████████████████████| (45/45 MB, 48 MB/s)        
Signature and comment signature verified
Trusted comment: timestamp:1717729450	file:zig-macos-aarch64-0.13.0.tar.xz	hashed
Usage: zig [command] [options]

@suzuki-shunsuke suzuki-shunsuke added the enhancement New feature or request label Jul 12, 2024
@suzuki-shunsuke suzuki-shunsuke marked this pull request as draft July 12, 2024 01:07
@suzuki-shunsuke suzuki-shunsuke marked this pull request as ready for review July 17, 2024 01:51
@suzuki-shunsuke suzuki-shunsuke merged commit f2b5196 into main Jul 17, 2024
10 checks passed
@suzuki-shunsuke suzuki-shunsuke deleted the feat/minisign branch July 17, 2024 01:51
@suzuki-shunsuke suzuki-shunsuke added this to the v2.31.0 milestone Jul 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
No open projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Support verifying packages with minisign
1 participant