New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
WIP: fix 281, warn if expiration subpacket is not hashed #288
Conversation
Hi @kristelfung ! thanks for your PR. It appears that the appveyor build is failing with something that appears unrelated to this PR, so I'll go on and review it. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It mostly LGTM, modulo two nits 👍
However, I wonder if @lukpueh is on board with the way we are solving this issue
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for you PR, @kristelfung! This is solid work. Please address my comments and we can merge.
f82cdd6
to
70d04dd
Compare
Signed-off-by: Kristel Fung <kristelfung@gmail.com>
thanks @kristelfung ! |
- Updates gpg tests to cover missing lines in gpg-subpackage. - One feature, a warning about unhashed information added in in-toto/in-toto#288, remains uncovered. To not break tox builds, the required coverage threshold is lowered to 99% - This commit also enables output buffering on the unittest runner, i.e. to hide most of the test output until a test fails. See in-toto/in-toto#240 for details.
- Updates gpg tests to cover missing lines in gpg-subpackage. - One feature, a warning about unhashed information added in in-toto/in-toto#288, remains uncovered. To not break tox builds, the required coverage threshold is lowered to 99% - This commit also enables output buffering on the unittest runner, i.e. to hide most of the test output until a test fails. See in-toto/in-toto#240 for details.
- Updates gpg tests to cover missing lines in gpg-subpackage. - One feature, a warning about unhashed information added in in-toto/in-toto#288, remains uncovered. To not break tox builds, the required coverage threshold is lowered to 99% - This commit also enables output buffering on the unittest runner, i.e. to hide most of the test output until a test fails. See in-toto/in-toto#240 for details.
- Updates gpg tests to cover missing lines in gpg-subpackage. - One feature, a warning about unhashed information added in in-toto/in-toto#288, remains uncovered. To not break tox builds, the required coverage threshold is lowered to 99% - This commit also enables output buffering on the unittest runner, i.e. to hide most of the test output until a test fails. See in-toto/in-toto#240 for details.
- Updates gpg tests to cover missing lines in gpg-subpackage. - One feature, a warning about unhashed information added in in-toto/in-toto#288, remains uncovered. To not break tox builds, the required coverage threshold is lowered to 99% - This commit also enables output buffering on the unittest runner, i.e. to hide most of the test output until a test fails. See in-toto/in-toto#240 for details.
Flag subpackets being added to the info dict as hashed or unhashed so we can warn if the expiration subpacket is not hashed (don't merge yet still not fully functional)