releases

mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-15 21:02:28 -06:00

Files

T

Ashutosh Narkar d2c11e51c4 bundle: Roundtrip manifest before hashing

When OPA verifies the content of the manifest file,
it first parses it into a JSON structure and then recursively orders
the fields of all objects alphabetically and then applies the
hash function. The same process was not followed while generating
the hash for the manifest content which would result in a digest
mismatch during verification. This can be observed with a manifest
that contains metadata.

Fixes: #4233

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>

2022-01-18 17:04:01 -08:00

bundle_test.go

bundle: Roundtrip manifest before hashing

2022-01-18 17:04:01 -08:00

bundle.go

bundle: Roundtrip manifest before hashing

2022-01-18 17:04:01 -08:00

file_test.go

bundle: Add support for merging and other improvements

2020-05-18 08:32:38 -04:00

file.go

bundle: adding lazy file reader for bundles (#3781 )