Commit Graph

162 Commits

Author SHA1 Message Date
Linda_pp a77177617a
Merge pull request #16 from tobiaskohlbau/addHashSignature
Add hash and signature validation
2018-11-09 20:00:26 +09:00
Tobias Kohlbau 116dfa144d Add hash and signature validation
Go-self-update lacks support for checking integrity of downloaded files.
For more advanced situation it's necessary to validate the hash or
verify against public signatures. This patch adds support for
SHA2 hash and ECDSA PublicKey signature validation.
SHA2 uses file with suffix `.sha256`, whereas ECDSA uses
`.sig` file endings. See `selfupdate/validate_test.go` for examples.

Signed-off-by: Tobias Kohlbau <t.kohlbau@myopenfactory.com>
2018-11-09 11:21:21 +01:00
rhysd db4f96105a use os.Executable() and .LTE() for safety in example 2018-11-06 19:39:58 +09:00
Linda_pp 6329a43531
Merge pull request #15 from tobiaskohlbau/patch-1
Fix bad go get within readme
2018-10-18 19:53:24 +09:00
Tobias Kohlbau 63988a901a
Fix bad go get within readme
Go get works with package names not with urls.
2018-10-18 11:04:52 +02:00
rhysd 4bfc1aa030 Merge branch 'gomod' 2018-09-23 20:52:01 +09:00
rhysd 23ccef091e use Go modules on CI 2018-09-23 20:49:15 +09:00
rhysd cc92a5255f introduce Go module 2018-09-23 20:37:06 +09:00
rhysd 41c1bbb080 Merge branch 'run-tests-shortly-on-PR' 2018-05-20 23:23:21 +09:00
rhysd 796b216a75 I don't want to waste time with Appveyor 2018-05-20 23:22:28 +09:00
rhysd 006a0d3c1f run tests with -short flag on pull requests
because they would fail since $GITHUB_TOKEN is not set
2018-05-20 22:15:41 +09:00
Linda_pp c7abcd03e1
Merge pull request #13 from databus23/patch-2
Do not require GITHUB_TOKEN for enterprise setups
2018-05-20 21:50:52 +09:00
rhysd 967270aa69 remove TestGitHubEnterpriseClientWithoutToken which is no longer valid due to 41acec2 2018-05-20 21:49:57 +09:00
Linda_pp 953b97fcd1
Merge pull request #12 from databus23/patch-1
fix UpdateSelf invocation on custom Updater object
2018-04-30 21:34:28 +09:00
Fabian Ruff 41acec25c4 Do not require GITHUB_TOKEN for enterprise setups
Not sure why this was added but using no token works for our GitHub enterprise installation.
2018-04-27 17:12:36 +02:00
Fabian Ruff d1140d3bf8
fix UpdateSelf invocation on custom Updater object 2018-04-27 16:07:51 +02:00
rhysd ef42c4e258 fix typo 2018-04-19 17:58:07 +09:00
rhysd 6f1eb0320d [skip ci] add link to a deck at GoCon 2018 Spring 2018-04-17 21:51:40 +09:00
rhysd 4f7f22f940 revise introduction and add license notice of xz 2018-03-28 11:00:13 +09:00
rhysd 8e171e57c0 ignore coverage report file 2018-03-28 10:52:32 +09:00
rhysd c93b65e513 github.Releases.DownloadReleaseAsset() was fixed 2018-03-27 15:42:23 +09:00
Linda_pp d782c99504
fix typo 2018-03-22 08:55:31 +09:00
rhysd 8cf7b9f527 avoid go-github issue on CI 2018-03-22 05:21:24 +09:00
rhysd 74c96838ff add notice about https://github.com/google/go-github/issues/870 2018-03-22 05:09:28 +09:00
rhysd d475f34e08 fix misspells 2018-03-21 19:18:46 +09:00
Linda_pp c0c9635893
Merge pull request #10 from jbfarez/feature/custom-version-support
Add support to pass custom version to fetch from Github
2018-03-21 19:05:43 +09:00
Jean-Baptiste Farez a3573534f9
Add support to pass custom version to fetch from Github 2018-03-13 09:16:15 +01:00
rhysd d5c53b8d05 do not assume tag text is always semantic versioning
regex \d+\.\d+\.\d+ is tested for repository tags. But it's not
sufficient. For example, '0.1.2.3.4' is not adopting a semantic
versioning, but can pass the regex.
2018-02-12 00:05:51 +09:00
rhysd 9b705a72eb refactoring: positional fields for struct and unnamed return value
- positional fields are better because it raises an error when missing
  field is detected
- unnamed return value is better because it introduces simpler control
  sequence. Previously I used it because rel.Version is added after
  and the parse may cause an error. But now it is parsed more earlier
  and not required in DetectLatest().
2018-02-11 23:50:21 +09:00
rhysd 281445119d describe how to run tests and about CI 2018-02-11 23:36:50 +09:00
rhysd 02a5d46e86 do not assume a descending order (fix #11)
for testing, v0.0.9 is added to test-release-tar repository.

    https://github.com/rhysd-test/test-release-tar/releases
2018-02-11 23:22:08 +09:00
rhysd 7bcefbd709 refactoring: parse a version when an asset is detected 2018-02-11 22:57:15 +09:00
rhysd 56328bb821 more real-world examples 2018-02-06 15:48:03 +09:00
rhysd a384a5b5c8 test creating an updater when token is not set 2018-02-06 14:01:43 +09:00
rhysd 2bc49bb7b5 add more log on detection and fix a log message 2018-02-06 13:47:59 +09:00
rhysd 8fd62fcf16 remove httpClient field of Updater instance which is not used 2018-02-06 11:57:30 +09:00
rhysd 7b77ed8d85 tweak document of DetectLatest() 2018-02-06 11:57:30 +09:00
Jean-Baptiste Farez 05a876f32d Fix go-github int64 requirements (#9) 2018-02-02 18:07:47 +09:00
rhysd 083b14b51a add a test for private repositories 2018-01-20 00:34:50 +09:00
rhysd 8a8c4e5c9a Merge branch 'updater' (fix #2, fix #6) 2018-01-19 19:58:20 +09:00
rhysd a8d7262d70 add tests for GitHub Enterprise more
These tests require GHE environment.
Please set following environment variables:

- $GITHUB_ENTERPRISE_TOKEN
- $GITHUB_ENTERPRISE_BASE_URL
- $GITHUB_ENTERPRISE_REPO
2018-01-19 19:49:45 +09:00
rhysd 89582ba9d1 add more test cases to check invalid GitHub Enterprise base URL 2018-01-19 18:43:29 +09:00
rhysd 1265b4826d add tests to create an updater instance for GitHub Enterprise 2018-01-19 18:13:38 +09:00
rhysd f637165ab7 add description about `Updater` struct usage for GitHub Enterprise 2018-01-19 18:04:30 +09:00
rhysd d0de60fba1 enable to have enterprise base URL and upload URL 2018-01-19 17:47:21 +09:00
rhysd 996452a5ed use default HTTP client to download blob from redirect URL 2018-01-19 17:00:30 +09:00
rhysd d98ca18787 fix handling redirection of GitHub download asset API 2018-01-19 15:03:47 +09:00
rhysd 6b4eeadeb7 download an asset via GitHub Releases API by default 2018-01-19 13:30:23 +09:00
rhysd fd492d6b01 create Updater struct to use persistent GitHub API client also for downloading assets 2018-01-19 11:35:24 +09:00
Linda_pp 54df18b98c
Merge pull request #8 from Songmu/tcnksm/go-gitconfig
How about supporting tcnksm/go-gitconfig
2018-01-19 00:09:04 +09:00