RayPals/Claro
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

package: reject duplicate manifest checksums

Browse Source
This commit is contained in:
Hermes Agent
2026-09-04 14:57:29 +00:00
parent beac4c634b
commit ae6b52811e
7 changed files with 15 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/validate_package_security.py
+9
View File
@@ -156,6 +156,15 @@ def main():
fail(f"Package duplicate manifest-name diagnostic was unclear:\n{out}")
manifest_path.write_text(manifest, encoding="utf-8")
duplicate_checksum_manifest = manifest + "checksum: " + checksum + "\n"
manifest_path.write_text(duplicate_checksum_manifest, encoding="utf-8")
rc, out = run([str(EXE), "package", "doctor"], work)
if rc == 0:
fail("package doctor must reject duplicate package manifest checksums")
if "BAD package checksum: math-tools" not in out:
fail(f"Package duplicate checksum diagnostic was unclear:\n{out}")
manifest_path.write_text(manifest, encoding="utf-8")
rc, out = run([str(EXE), "package", "doctor"], work)
if rc != 0:
fail(out)