Commit Graph
2 Commits
Author SHA1 Message Date
Tonis Tiigi 7949ce5003 policy: fix flaky HTTP PGP test
Ensure the negative checksum case always mutates the digest instead of
sometimes reproducing the original value when it already starts with 0.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-04-01 21:58:30 -07:00
Tonis Tiigi a57372e966 policy: add HTTP PGP signature verification builtin
Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-03-26 15:39:46 -07:00