feat: implement aqua/mise distribution support#45
Conversation
- Add cosign keyless signing to GitHub Actions release workflow - Bump version to 0.3.1 for testing signed releases - Create validation script for verifying release signatures - Add aqua registry configuration for upstream submission - Create comprehensive testing documentation - Add local testing script for aqua configuration This implements Phase 1 and Phase 2 of the aqua distribution plan, enabling envsense to be distributed via 'mise install aqua:envsense'.
There was a problem hiding this comment.
Pull Request Overview
This PR implements aqua/mise distribution support for envsense, allowing users to install via mise install aqua:envsense. The implementation includes release signing with cosign keyless signatures, aqua registry configuration, comprehensive testing scripts, and documentation. This enables secure, cryptographically-verified installation of envsense through the popular mise/aqua package manager ecosystem.
- Implements cosign keyless signing in GitHub Actions release workflow for cryptographic verification
- Creates aqua registry configuration with signature verification support
- Adds validation and testing scripts for the signing and installation process
Reviewed Changes
Copilot reviewed 11 out of 12 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/release.yml |
Adds cosign keyless signing and OIDC permissions to release workflow |
scripts/validate-signing.sh |
Script to validate release signatures are working correctly |
scripts/test-aqua-local.sh |
Script to test aqua configuration with local registry setup |
aqua-registry-entry.yaml |
Aqua registry configuration defining package metadata and signing verification |
docs/testing-aqua-installation.md |
Comprehensive testing documentation for aqua installation |
docs/planning/aqua-distribution/ |
Planning documents outlining implementation strategy |
Cargo.toml, envsense-macros/Cargo.toml, envsense-macros/envsense-macros-impl/Cargo.toml |
Version bumps to 0.3.1 for testing signing process |
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| packages: | ||
| - name: envsense | ||
| registry: test-local | ||
| version: v0.3.0 # Use current version from Cargo.toml |
There was a problem hiding this comment.
The hardcoded version v0.3.0 in the comment doesn't match the actual version being used (0.3.1 per the version bump). This should be updated to reflect the current version or made dynamic to avoid future inconsistencies.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Overview
This PR implements aqua/mise distribution support for envsense, allowing users to install via `mise install aqua:envsense`.
Changes
Phase 1: Release Signing ✅
Phase 2: Aqua Configuration ✅
Documentation ✅
Testing Plan
Next Steps (Post-Merge)
Validation
This implements the aqua distribution plan outlined in `docs/planning/aqua-distribution/implementation-plan.md`.