Skip to content

Conversation

@ghost
Copy link

@ghost ghost commented Dec 26, 2023

This PR improves error messages of notation plugin install command and updates the related cli specs as well.

This PR also adds zip bomb and zip slip tests.

Resolves #853.

Patrick Zheng added 4 commits December 26, 2023 16:01
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
@codecov-commenter
Copy link

codecov-commenter commented Dec 26, 2023

Codecov Report

Attention: 18 lines in your changes are missing coverage. Please review.

Comparison is base (dc575a6) 63.91% compared to head (29aabda) 65.14%.

Files Patch % Lines
cmd/notation/plugin/install.go 70.73% 8 Missing and 4 partials ⚠️
internal/osutil/file.go 20.00% 3 Missing and 1 partial ⚠️
cmd/notation/internal/plugin/plugin.go 0.00% 1 Missing ⚠️
cmd/notation/plugin/uninstall.go 0.00% 1 Missing ⚠️

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #855      +/-   ##
==========================================
+ Coverage   63.91%   65.14%   +1.23%     
==========================================
  Files          45       45              
  Lines        2699     2717      +18     
==========================================
+ Hits         1725     1770      +45     
+ Misses        820      787      -33     
- Partials      154      160       +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@ghost ghost changed the title update: notation plugin command error messages fix: notation plugin command error messages Dec 27, 2023
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
@ghost ghost changed the title fix: notation plugin command error messages fix: notation plugin install command error messages Dec 27, 2023
@ghost ghost changed the title fix: notation plugin install command error messages fix: notation plugin install error messages Dec 27, 2023
Patrick Zheng added 4 commits December 28, 2023 17:18
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
@ghost ghost requested a review from shizhMSFT January 2, 2024 05:18
shizhMSFT
shizhMSFT previously approved these changes Jan 2, 2024
Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
@ghost ghost requested review from priteshbandi and shizhMSFT January 3, 2024 06:32
@ghost ghost changed the title fix: notation plugin install error messages fix: notation plugin install error messages and tests Jan 3, 2024
Patrick Zheng added 3 commits January 3, 2024 14:38
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Patrick Zheng added 2 commits January 3, 2024 16:41
Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
@ghost ghost requested review from JeyJeyGao and shizhMSFT January 3, 2024 08:54
Copy link
Contributor

@shizhMSFT shizhMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@priteshbandi priteshbandi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@priteshbandi priteshbandi merged commit 95b9861 into notaryproject:main Jan 4, 2024
@ghost ghost deleted the plugin-install branch January 4, 2024 07:35
@ghost ghost mentioned this pull request Jan 25, 2024
6 tasks
rgnote pushed a commit to rgnote/notation that referenced this pull request Mar 8, 2024
…t#855)

* This PR improves error messages of `notation plugin install` command and updates the related cli specs. (Resolves notaryproject#853)
* This PR also adds zip bomb and zip slip tests.

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
rgnote pushed a commit to rgnote/notation that referenced this pull request Mar 8, 2024
…t#855)

* This PR improves error messages of `notation plugin install` command and updates the related cli specs. (Resolves notaryproject#853)
* This PR also adds zip bomb and zip slip tests.

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Signed-off-by: rgnote <5878554+rgnote@users.noreply.github.com>
7h3-3mp7y-m4n pushed a commit to 7h3-3mp7y-m4n/notation that referenced this pull request Mar 29, 2025
…t#855)

* This PR improves error messages of `notation plugin install` command and updates the related cli specs. (Resolves notaryproject#853)
* This PR also adds zip bomb and zip slip tests.

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
FeynmanZhou pushed a commit to FeynmanZhou/notation that referenced this pull request May 15, 2025
…t#855)

* This PR improves error messages of `notation plugin install` command and updates the related cli specs. (Resolves notaryproject#853)
* This PR also adds zip bomb and zip slip tests.

Signed-off-by: Patrick Zheng <patrickzheng@microsoft.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

notation plugin command enhancements

4 participants