Skip to main content

Module trust

Module trust 

Source
Expand description

The trust inspector: where an entry’s installer comes from, what checks the integrity of what it installs, what it downloads unchecked, what privileges it uses and how far it has been tested. It reads files and asks package managers read-only questions; it changes nothing.

Three kinds of assurance are kept apart: the provenance of the HelixForge release the installer ships in, the integrity checks package managers make, and downloads that nothing checks.

Structs§

Build
What this copy of HelixForge is, for the provenance of what it ships.
Fact
One thing the inspector found.
Inspection
Everything the inspector found about one entry.

Enums§

Standing
How much a fact assures.

Functions§

inspect
Inspect an entry. root holds the catalog and scripts this build ships.