search

thaljef / Pinto

Curate your own repository of Perl modules
https://metacpan.org/module/Pinto::Manual
66 stars 49 forks source link

Document ideas on using Pinto to audit distributions #186

Closed tartansandal closed 9 years ago

tartansandal commented 9 years ago

This brings together my ideas about using Pinto and the new verify, look, and sign commands to form a, hopefully, coherent audit process.

tartansandal commented 9 years ago

This was mostly attempt to clarify my ideas so I could understand the use cases in #182 better. This was what convinced me that verify and the pullable commands needed to be able to set a 'paranoia' level -- because there are too many valid ways of approaching verification. So the Audit docs are probably not something for core. I'm thinking I might they might form part of a plugin of interest only to mad-arse security freaks like me ;-) The sign should probably for part of that. Possibly the clone and look commands as well, but they are a bit more general.