mirror of
https://github.com/csmith/apkutils
synced 2026-01-20 20:26:17 +01:00
No description
414b1a8ad8If a package is referred to be a specifier such as "pc:foo" instead of its actual name, we would never skip that as already resolved as we tracked it by package name. In some rare cases this can cause an infinite loop. Fix by simply deferring the "already resolved" check until we've resolved the name, and use that. |
||
|---|---|---|
| .github | ||
| examples | ||
| keys | ||
| .gitignore | ||
| CHANGELOG.md | ||
| dependencies.go | ||
| go.mod | ||
| index.go | ||
| LICENCE | ||
| read.go | ||
| README.md | ||
| verify.go | ||
apkutils
apkutils contains utilities for operating on Alpine packages and package indices from Go.
Specifically it can:
- Verify the public key signature in an APKINDEX.tar.gz bundle, then parse out
the contents of the index. See
examples/verify-and-parse-index. - Verify the public key signature in an APK file, and then verify the hash
of the contents that is stored in the metadata, then return the content of
the APK. See
examples/verify-and-read-apk - Given the package information from an APKINDEX, recursively resolve
dependencies of packages to generate a bill of materials/list of packages
to install. See
examples/flatten-dependencies
Contributions of further functions or enhancements are welcome!