Task #5525
Collaborate with `ansible-galaxy collection` developers to validate the signature Collection content upon installation
Status:
NEW
Priority:
Normal
Assignee:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:
0%
Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Description
With a CollectionVersion's signatures available in the response serializer of 5523 the ansible-galaxy client is in a position to verify it trusts content before installing it.
Configuring the ansible-galaxy client for what keys to trust when performing this validation is beyond the scope of this document.
History
#2
Updated by bmbouter 10 months ago
- Parent task deleted (
#5517)
Removing since signing is being pushed post GA per https://github.com/ansible/galaxy-dev/issues/103#issuecomment-539037285
Please register to edit this issue
.