cnabio / signy

Go implementation for CNAB content trust verification using TUF, Notary, and in-toto
MIT License
31 stars 11 forks source link

Configurable environment variables for passphrases #82

Open radu-matei opened 4 years ago

radu-matei commented 4 years ago

[Original comment:](https://github.com/cnabio/signy/pull/80#discussion_r447417968

As we think more about how consumers will end up using this as a library rather than a CLI, we should think about making the environment variables for setting passphrases to be configurable.

There are two types of consumers for Signy: end-users, who use the CLI, and other tools that are using the Go packages. I think there should be a way for both types of users to configure the environment variables used for key passphrases (i.e. SIGNY_ROOT_PASSPHRASE), similarly to how the trust directory is configured.