Tonis Tiigi e3fba18b63 source/http: add PGP verification and shared pgpsign ...

Add detached PGP verification for HTTP sources during metadata resolution
and expose LLB options/caps/attrs for signature validation.

Extract shared OpenPGP verification/parsing logic into util/pgpsign and
reuse it from git signing, plus add integration and source-level tests.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>

2026-02-20 08:13:38 -08:00

..

pgpsign.go

source/http: add PGP verification and shared pgpsign

2026-02-20 08:13:38 -08:00