Development record
The brief says abcd update is the only command that reaches the network, but ahoy install also reaches GitHub's attestations API and Sigstore's TUF repository when it checks a downloaded binary's provenance (internal/core/update/provenance.go)
issueresolvedminoriss-2610160857121531
The brief says abcd update is the only command that reaches the network, but ahoy install also reaches GitHub's attestations API and Sigstore's TUF repository when it checks a downloaded binary's provenance (internal/core/update/provenance.go)
Frontmatter
| id | iss-2610160857121531 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | minor |
.abcd/work/issues/resolved/iss-2610160857121531-the-brief-says-abcd-update-is-the-only.md
open on GitHub ↗ · commit history ↗