stacklok / toolhive / 32269514024

71%

Build Type

push

github

Committed by web-flow

Commit Message

Switch skill artifact signing to toolhive-core's signer (#6383)

* Switch skill artifact signing to toolhive-core's signer

toolhive-core v0.0.41 now ships a container/signer package with
Fulcio/Rekor keyless SignOCI alongside the existing cosign key-pair
path, superseding toolhive's own copy. Switch skillsvc and the
offline verifier to import it, and delete pkg/skills/signer.

Closes #6308

Signed-off-by: Samuele Verzi <samu@stacklok.com>

* Mark now-transitive sigstore deps indirect

pkg/skills/signer was the last direct importer of these two
modules; deleting it (previous commit) left them indirect-only.

Signed-off-by: Samuele Verzi <samu@stacklok.com>

---------

Signed-off-by: Samuele Verzi <samu@stacklok.com>

Coverage Stats

3 of 3 new or added lines in 2 files covered. (100.0%)

352 existing lines in 10 files now uncovered.

86211 of 122347 relevant lines covered (70.46%)

101.26 hits per line