You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
However, it may not always be reasonable to assume that gpg is available. This is perhaps the case with immutable operating systems such as Fedora CoreOS, OpenSuSe MicroOS and others.
Availability of gpg aside, shelling out is also risky from a security perspective, leaving you open to all sorts of side-channel and other attacks.
Meanwhile there are readily available, widely deployed, Go gpg libraries such as ProtonMail/gopenpgp
The text was updated successfully, but these errors were encountered:
At present containers/common/blob/pkg/secrets/passdriver/passdriver.go shells out to
gpg
.However, it may not always be reasonable to assume that
gpg
is available. This is perhaps the case with immutable operating systems such as Fedora CoreOS, OpenSuSe MicroOS and others.Availability of
gpg
aside, shelling out is also risky from a security perspective, leaving you open to all sorts of side-channel and other attacks.Meanwhile there are readily available, widely deployed, Go gpg libraries such as ProtonMail/gopenpgp
The text was updated successfully, but these errors were encountered: