New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Initial artifact signing code #3758
Conversation
construction. Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
If conda-build changes the way it serializes repodata at all, conda needs to hash it differently. Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
We require contributors to sign our Contributor License Agreement, and we don't have one on file for @awwad. In order for us to review and merge your code, please e-sign the PDF at https://conda.io/en/latest/contributing.html#conda-contributor-license-agreement. We then need to manually verify your signature. We will ping the bot to refresh the PR status when we have confirmed your signature. |
We require contributors to sign our Contributor License Agreement, and we don't have one on file for @awwad. In order for us to review and merge your code, please e-sign the PDF at https://conda.io/en/latest/contributing.html#conda-contributor-license-agreement. We then need to manually verify your signature. We will ping the bot to refresh the PR status when we have confirmed your signature. |
Add endpoint for user specifying a key to use to sign metadata files Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
Signed-off-by: Sebastien Awwad <sebastien.awwad@gmail.com>
e377ba8
to
a3ffbdf
Compare
LGTM. Would be nice to sort out getting the authenticate module from conda before merging this in though |
Definitely -- just wanted a sense of whether things made sense. TY. |
Hi there, thank you for your contribution! This pull request has been automatically locked because it has not had recent activity after being closed. Please open a new issue or pull request if needed. Thanks! |
Draft of code to perform artifact signing during indexing.
Please note that the
authenticate.py
module will not be included in the final conda-build code, as it will instead be imported viaconda.exports
(fromconda.common.authenticate
).