Part of this effort should include updates to the documentation for operators of Secretless - how do you use it with external plugins? That should include detailed instructions for providing checksum files to Secretless for verification when loading external plugins. It should also discuss the risks of loading external plugins that are provided without trusted checksum files.
The documentation for external plugin builders should include recommendations on including checksum files with plugin releases, and suggested instructions for how to create them.
Name of the Epic
Provide a short description of the epic here.
Aha Cards
Team
SDLC Timeline
Stories
List the stories here.