Commit Graph

7 Commits

Author SHA1 Message Date
Bruno Bernardino 8e2036f297
Checksums - Allow anyone to confirm source and delivered code (#467)
* Checksums - Allow anyone to confirm source and delivered code

For now this only has the initial step on making CSP stricter so we can use it to parse through used files.

Very much WIP for now, but now it should just be a matter of writing up concise docs on how to go through the process, after generating and publishing the checksums via CI as well.

Related to #331

* Lint!

* Add more instructions and CI to build checksums.

* Fix typo and lint

* Remove CSP package dependency, build it manually.

Update commands in docs, fix web extension release.

* Tweak docs and webpack. CI still isn't producing a matching checksum, though.

* Tweak docs for web checksums, add debugging in the checksum action, make it faster, temporarily.

* Fix web checksum, add checksums and instructions for everything else

Closes #467

* Fix tauri release + macos sha256sum

* Remove .app checksum, since it's a directory and checksum'ing the .tar.gz seems strange.

* Properly indent + fix sha256sum results (and windows line endings problem)

* Include PWA for release, add instructions to change filenames when checksum fails.

* Include _everything_ in the CSP now, and tweak the verification script and checksum build to also include everything, now.

Still requires changes in the way to verify a published web app, where I'll have to write a script to parse through the whole CSP now.

* Add TypeScript (Deno) script to parse through CSP and download matched files.

Also update docs.

* Tweak web checksum examples.

* Remove content hashes from font files.

* Try sorting files before adding to CSP, to enforce consistency.
2022-06-20 07:34:45 +01:00
Martin Kleinschrodt f417c4bbac Remove formatOnSave settings from workspace settings 2022-02-25 18:18:13 +01:00
Martin Kleinschrodt 2b5b957a58 Automatically wrap lines in markdown files at 80 characters 2022-02-25 16:25:33 +01:00
Martin Kleinschrodt 589ffeaf49 Update main readme; Add AGPL license; add shorter/better aliases for some commands 2022-02-25 16:25:33 +01:00
Bruno Bernardino 50ae105b45
A few improvements, requested from the review:
- File reading is now happening later in the process;
- File reading now reuses methods from `core/attachment`;
- Errors thrown in the import now include an error message;
- Adds prettier command to "prettify" all files;
- Adds prettier command to check for files not conforming to prettier's config;
- Makes CI run the prettier:check command;
- Changes `export const method = () => {};` to `export function method() {}` in the `1pux-parser` file;
- Other minor consistency changes/fixes/improvements;
- Actually ran prettier on every file, and it had a lot of things to tweak.
2021-12-20 15:01:25 +00:00
Martin Kleinschrodt 9947f5e237 Some minor tweaks 2021-08-06 09:39:09 +02:00
Martin Kleinschrodt c52fecf966 WIP 37 2021-05-31 08:54:14 +02:00