pray_core/client_trust/
mod.rs

1mod commands;
2mod enforce;
3mod feed;
4mod git;
5mod home;
6mod import_registry;
7mod package_sign;
8mod policy;
9mod prompt;
10mod ssh_host;
11
12pub use commands::{
13    add_allowed_signing_key, ensure_policy_file, import_signing_keys_from_repository, list_policy,
14    remove_allowed_signing_key, set_allow, set_require_signed_commit, set_require_signed_packages,
15    show_policy_toml, TrustListScope,
16};
17pub use enforce::{enforce_source_trust, env_truthy, gate_git_source, signer_matches_allowed};
18pub use feed::{
19    check_compromised_keys, parse_compromised_feed, trusted_keys_by_scope, CompromisedKeyEntry,
20    DEFAULT_COMPROMISED_KEYS_SOURCE,
21};
22pub use git::{is_remote_git_url, repository_signing_keys, trust_git_env};
23pub use home::{
24    copy_trust_state, effective_trust_home, persistent_pray_home, prepare_ephemeral_home,
25};
26pub use import_registry::{fetch_ssh_publishers, import_registry_trust, ImportRegistryResult};
27pub use package_sign::enforce_require_signed_packages;
28pub use policy::{
29    best_rule, load_policy, load_policy_or_default, normalize_key, save_policy, ClientTrustPolicy,
30    ClientTrustRule,
31};
32pub use prompt::{prompt_import_signing_keys_for_source, prompt_untrusted_source_consent};
33pub use ssh_host::{gate_pray_ssh_host, gate_pray_ssh_publisher, gate_pray_ssh_publisher_optional};
pray_core/client_trust/mod.rs

pray_core/client_trust/
mod.rs
