Tonis Tiigi a57372e966 policy: add HTTP PGP signature verification builtin ...

Add verify_http_pgp_signature Rego builtin for HTTP sources using
pgpsign with checksum-request/response flow through policy resolution.
Wire sourcemeta HTTP checksum request/response conversion and add tests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>

2026-03-26 15:39:46 -07:00

..

convert_test.go

policy: add HTTP PGP signature verification builtin

2026-03-26 15:39:46 -07:00

convert.go

policy: add HTTP PGP signature verification builtin

2026-03-26 15:39:46 -07:00

resolver_test.go

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00

resolver.go

build: reuse build session for policy source resolution

2026-03-04 17:21:20 +01:00