helm/pkg/provenance
Ashley Davis 0ab44aef70
add more error checks during the signing process
Before this change, several of the potential errors during the process
of signing a package were skipped.

Crucially, `Close()`ing the ReadCloser from the gpg clearsigner is the call
which actually does the signing, and so has several points of failure
which are ignored; for example, if there's a problem with the format of
the key.

Also changes the error from messageBlock() to be propagated rather than
being swallowed, and adds a test for the case where a signer fails to
sign.

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-11-29 12:07:02 +00:00
..
testdata ref(pkg/chart): add validation method to chart 2019-04-05 13:40:06 -07:00
doc.go Updating the module for v3 as the major version 2019-10-03 14:27:05 -04:00
sign.go add more error checks during the signing process 2021-11-29 12:07:02 +00:00
sign_test.go add more error checks during the signing process 2021-11-29 12:07:02 +00:00