Skip to content

fix:ci integrity v2#27

Merged
jeanmachuca merged 2 commits into
developmentfrom
fix/ci-integrity-v2
Jul 4, 2026
Merged

fix:ci integrity v2#27
jeanmachuca merged 2 commits into
developmentfrom
fix/ci-integrity-v2

Conversation

@jeanmachuca

Copy link
Copy Markdown
Member

Automated PR from fix/ci-integrity-v2

@jeanmachuca jeanmachuca merged commit 0c67755 into development Jul 4, 2026
2 checks passed
jeanmachuca added a commit that referenced this pull request Jul 5, 2026
* fix: resolve all golangci-lint errcheck issues (#28)

* feat:proxy notary (#22)

* feat: .cgp package registry server

- 6 REST endpoints: search, get, download, publish, unlock, health
- In-memory package store with search (name+description+tags)
- Token-based auth for publish/unlock endpoints
- .cgp file serving from data directory
- 27 tests across server, store, and auth packages
- CI: build, lint, test, vet

* chore: attribute project to Jean Machuca with GitHub Sponsors

* chore: add * 2.* pattern to .gitignore for editor backups

* docs: expand README with build, API, and usage details (#4)

* docs: add cross-repo navigation links to README (#7)

* docs: add contributing section to README (#9)

* Fix CI blockers: commit go.sum, fix errcheck, fix build paths, wire up CI

* feat: add source URL validation (source_repository, source_issues) on publish

* fix: CI integrity and .gitignore repairs across repos (#17)

* feat: refactor to proxy/notary — 302 redirect + checksum ledger

BREAKING: registry-server no longer stores .cgp files on disk.
- handleDownload() now returns 302 redirect to package's download_url
- handlePublish() computes SHA-256 from multipart upload (discards file)
- handlePublish() accepts sha256 + download_url via JSON (no fetch)
- Package struct gains DownloadURL field
- Removed cgpPath(), downloadFile(), DataDir filesystem usage
- Notary audit trail logged on each publish
- Updated all tests for proxy/redirect mode

* fix:ci blockers (#25)

* feat: .cgp package registry server

- 6 REST endpoints: search, get, download, publish, unlock, health
- In-memory package store with search (name+description+tags)
- Token-based auth for publish/unlock endpoints
- .cgp file serving from data directory
- 27 tests across server, store, and auth packages
- CI: build, lint, test, vet

* chore: attribute project to Jean Machuca with GitHub Sponsors

* chore: add * 2.* pattern to .gitignore for editor backups

* docs: expand README with build, API, and usage details (#4)

* docs: add cross-repo navigation links to README (#7)

* docs: add contributing section to README (#9)

* Fix CI blockers: commit go.sum, fix errcheck, fix build paths, wire up CI

* feat: add source URL validation (source_repository, source_issues) on publish

* fix:ci integrity (#26)

* feat: .cgp package registry server

- 6 REST endpoints: search, get, download, publish, unlock, health
- In-memory package store with search (name+description+tags)
- Token-based auth for publish/unlock endpoints
- .cgp file serving from data directory
- 27 tests across server, store, and auth packages
- CI: build, lint, test, vet

* chore: attribute project to Jean Machuca with GitHub Sponsors

* chore: add * 2.* pattern to .gitignore for editor backups

* docs: expand README with build, API, and usage details (#4)

* docs: add cross-repo navigation links to README (#7)

* docs: add contributing section to README (#9)

* Fix CI blockers: commit go.sum, fix errcheck, fix build paths, wire up CI

* feat: add source URL validation (source_repository, source_issues) on publish

* fix: CI integrity and .gitignore repairs across repos

* fix: add CI workflow and gitignore trailing-space pattern (#27)

* feat: .cgp package registry server (#24)

- 6 REST endpoints: search, get, download, publish, unlock, health
- In-memory package store with search (name+description+tags)
- Token-based auth for publish/unlock endpoints
- .cgp file serving from data directory
- 27 tests across server, store, and auth packages
- CI: build, lint, test, vet

* feat: add source_repository and source_issues fields to package publish (#30)

* feat: SQLite-ready file store, PUT endpoint, A1-A10 validation, scoped auth (#31)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant