class

Smith::TrustStore

Inherits Reference < Object

Which project configs the user has allowed to run hooks.

Hooks are arbitrary commands run with the user's rights and outside the approval gate, so a .smith/config.toml checked into someone else's repository is a code-execution vector. Trust is granted per project and per hook section: change the hooks, and smith asks again.

Constants

FILE_NAME = "trusted.json"

Constructors

new(base_dir : String | Nil = nil)

Source

Instance methods

path

Source

trust(project_path : String, digest : String) : Nil

Source

trusted?(project_path : String, digest : String) : Bool

Source