Skip to content

Conversation

stefanberger
Copy link
Contributor

@stefanberger stefanberger commented Jun 24, 2025

Add a set_allow_symlinks method to the hashing Config so that this option can be passed onto the file serializers. This method on the Config class seems necessary since its constructor does not have it. Extend the CLI tool with a --allow-symlinks option on all signing and verifying methods and use this option in a scripted test case to test signing of files by following symlinks.

Summary

Checklist
  • All commits are signed-off, using DCO
  • All new code has docstrings and type annotations
  • All new code is covered by tests. Aim for at least 90% coverage. CI is configured to highlight lines not covered by tests.
  • Public facing changes are paired with documentation changes
  • Release note has been added to CHANGELOG.md if needed

Add a set_allow_symlinks method to the hashing Config so that this option
can be passed onto the file serializers. This method on the Config class
seems necessary since its constructor does not have it.

Signed-off-by: Stefan Berger <[email protected]>
@stefanberger stefanberger requested review from a team as code owners June 24, 2025 00:19
Comment on lines 118 to 120
# Decorator for the commonly used option to allow symlinks
_allow_symlinks_option = click.option(
"--allow-symlinks",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

quick note that all the other flags are snake case, not kebab

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

quick note that all the other flags are snake case, not kebab

Some exceptions do exist ... fixed.

--ignore-paths "../$(basename "${ignorefile}")" 

mihaimaruseac
mihaimaruseac previously approved these changes Jun 24, 2025
Add --allow_symlinks option to all signing and verifying methods.

Signed-off-by: Stefan Berger <[email protected]>
@mihaimaruseac mihaimaruseac merged commit 5750896 into sigstore:main Jun 25, 2025
51 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants