xeno/Portfolio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: close release provenance and privacy gaps

Browse Source
This commit is contained in:
LucaP
2026-09-02 11:25:52 +03:00
parent 7da2b72933
commit 79e5d04395
17 changed files with 2271 additions and 704 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
scripts/deploy/lib/release-common.d.mts
View File

@@ -5,3 +5,17 @@ export interface ArchiveFile {
export function createDeterministicTar(files: readonly ArchiveFile[]): Buffer;
export function parseDeterministicTar(source: Uint8Array): ArchiveFile[];
export function verifySignedRelease(input: {
signedManifestPath: string;
authorityRoot: string;
protectedState: Record<string, unknown>;
}): Promise<Record<string, unknown>>;
export function verifySignedReleaseForTest(input: {
signedManifestPath: string;
trustPolicyPath: string;
verifySignedReleaseEnvelope: (input: Record<string, unknown>) => unknown;
protectedState: Record<string, unknown>;
now: string;
}): Promise<Record<string, unknown>>;