Enum SignaturePolicy 

pub enum SignaturePolicy<'a> {
    AllowUnsigned,
    RequireSigned,
    RequireTrustedPublisher,
    RequireTrustedSigner,
    RequirePinnedPublisher {
        namespace: &'a str,
    },
}

How strictly an install door treats package signatures (GHSA-gvg8-285q-m62g).

Variants

AllowUnsigned

Local file the caller explicitly vouched for (--allow-unsigned).

RequireSigned

A valid signature is required, from any key (local imports with --allow-untrusted-signer; network peers whose admission adds its own checks).

RequireTrustedPublisher

A valid signature from a key anchored for the package’s publisher subject or this machine’s own publisher key (default for local CLI imports of third-party files).

RequireTrustedSigner

A valid signature from a key anchored for the package’s publisher subject (MCP imports: the model cannot vouch for a file).

RequirePinnedPublisher

Remote registry installs: signed, the package belongs to the requested namespace, and the key matches the publisher key pinned for it (trust on first use).

Fields

namespace: &'a str

Trait Implementations

impl<'a> Clone for SignaturePolicy<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for SignaturePolicy<'a>

impl<'a> Debug for SignaturePolicy<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Eq for SignaturePolicy<'a>

impl<'a> PartialEq for SignaturePolicy<'a>

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl<'a> StructuralPartialEq for SignaturePolicy<'a>