Verify downloaded distributions cryptographically (2nd attempt)

thaljef / Pinto

Curate your own repository of Perl modules

https://metacpan.org/module/Pinto::Manual

66 stars 49 forks source link

Verify downloaded distributions cryptographically (2nd attempt) #191

Closed tartansandal closed 1 year ago

tartansandal commented 9 years ago

Summary

modifies verify command to verify the current stack
allows for up to 6 different levels of verification
adds --verify-upstream option to add, pull, update, and install
add PINTO_GNUPGHOME for using dedicated keyring
fix Tester.pm so test_name is propagated

Currently --verify-upstream=2 should Do The Right Thing for CPAN users. We may want to make that the default. The other levels exist for special cases and the ultra paranoid.

thaljef commented 9 years ago

Sorry for the delay. I've been preoccupied with Perl::Critic.

I will merge some of these PRs over the weekend.

Thanks for your patience.

tartansandal commented 9 years ago

Awesome. I've been using the merged bits for a couple of weeks and it all seems to be working okay. Managed to use it to get a major project over a severe stumbling block -- incredibly grateful to Pinto and yourself for that. Let me know it you have any questions.