From a476d44201dd9e4a4b509047829c11fd736880dd Mon Sep 17 00:00:00 2001 From: oppiliappan Date: Tue, 10 Jun 2025 21:06:56 +0100 Subject: [PATCH] crypto: fix signature verification for initial commit Change-Id: rqzvvtnzkzvqnyruzylsmqmzvtsmvuql initial commit does not have a parent commit and should be excluded from the signature check. Signed-off-by: oppiliappan --- crypto/verify.go | 4 +++- flake.nix | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/crypto/verify.go b/crypto/verify.go index 2a01da3..5a9c5de 100644 --- a/crypto/verify.go +++ b/crypto/verify.go @@ -50,7 +50,9 @@ func VerifyCommitSignature(pubKey string, commit types.NiceDiff) (error, bool) { payload := strings.Builder{} fmt.Fprintf(&payload, "tree %s\n", commit.Commit.Tree) - fmt.Fprintf(&payload, "parent %s\n", commit.Commit.Parent) + if commit.Commit.Parent != "" { + fmt.Fprintf(&payload, "parent %s\n", commit.Commit.Parent) + } fmt.Fprintf(&payload, "author %s\n", author.String()) fmt.Fprintf(&payload, "committer %s\n", committer.String()) if commit.Commit.ChangedId != "" { diff --git a/flake.nix b/flake.nix index 07f663e..5676472 100644 --- a/flake.nix +++ b/flake.nix @@ -54,7 +54,7 @@ inherit (gitignore.lib) gitignoreSource; in { overlays.default = final: prev: let - goModHash = "sha256-ZckpIPqFk7/XBiEJUbmrAzdjAxV62hv896xqAXF2aZs="; + goModHash = "sha256-QPyeKKr7YMblwicQNemu3OamXwg7fVie6/IY10vQCl4="; appviewDeps = { inherit htmx-src lucide-src inter-fonts-src ibm-plex-mono-src goModHash gitignoreSource; }; -- 2.43.0