fix(knife): GPG-verify Node.js SHASUMS256.txt.asc before committing checksums - #2147

Merged

loosebazooka merged 5 commits into

GoogleContainerTools:mainfrom

rishuranjanofficial:fix/gpg-verify-node-shasums

Aug 31, 2026

Commits on Aug 4, 2026

fix: verify Node.js SHASUMS256.txt.asc GPG signature before trusting checksums
rishuranjanofficial
committed
53d6b23

Commits on Aug 27, 2026

gpg: verify Node.js checksums against committed release keys + daily key sync
rishuranjanofficial
committed
14401bb

Commits on Aug 28, 2026

Commits on Aug 31, 2026

knife: use execFileSync with arg arrays for gpg calls (no shell expansion)
rishuranjanofficial
committed
b93dd0b