chenzehaoo/moon_guard/lib/trust

README
V
crypto_keypair
V
crypto_sign
V
crypto_verify
V
manifest_sha256
V
report_new
V
trust_store
V
verify_package

chenzehaoo/moon_guard/lib/trust does not have a README file

TrustLevel

pub(all) enum TrustLevel {
  Full
  Partial
  Untrusted
} derive(Eq)

impl Show for TrustLevel

TrustLevel::to_string

source

fn TrustLevel::to_string(self : TrustLevel) -> String

TrustStore

source

pub(all) struct TrustStore {
  keys : Array[TrustedKey]
}

TrustStore::add_key

source

fn TrustStore::add_key(self : TrustStore, key_id : String, public_key : String, owner : String, trust_level : TrustLevel) -> Bool

TrustStore::find_by_owner

source

fn TrustStore::find_by_owner(self : TrustStore, owner : String) -> Array[TrustedKey]

TrustStore::get_key

source

fn TrustStore::get_key(self : TrustStore, key_id : String) -> TrustedKey?

TrustStore::is_trusted

source

fn TrustStore::is_trusted(self : TrustStore, key_id : String) -> Bool

TrustStore::key_count

source

fn TrustStore::key_count(self : TrustStore) -> Int

TrustStore::list_all

source

fn TrustStore::list_all(self : TrustStore) -> Array[TrustedKey]

TrustStore::new

source

fn TrustStore::new() -> TrustStore

TrustStore::remove_key

source

fn TrustStore::remove_key(self : TrustStore, key_id : String) -> Bool

TrustStore::replace_all

source

fn TrustStore::replace_all(self : TrustStore, keys : Array[TrustedKey]) -> Unit

Replace the contents of the store. Used by load_from_json to restore from persistence and by tests to set up fixtures.

TrustStore::save_to_file

source

fn TrustStore::save_to_file(self : TrustStore, path : String) -> Bool

Persist this store to a JSON file at path, truncating any existing file. Returns false when the write fails (unwritable path, I/O error). This is the cross-process persistence entry point: one process writes, another process can load_from_file the same path and get the keys.

TrustedKey

source

pub(all) struct TrustedKey {
  key_id : String
  public_key : String
  owner : String
  trust_level : TrustLevel
  added_at : String
}

load_store_from_file

source

fn load_store_from_file(path : String) -> TrustStore?

Load a trust store from a JSON file written by save_to_file. Returns None when the file is missing, unreadable, or contains a malformed trust-store document.

normalize_public_key

source

fn normalize_public_key(public_key : String) -> String?

Normalize an Ed25519 public key to lower-case hex, accepting mixed-case input from PEM files or operator copy-paste. Returns None when the input has the wrong shape.

public_key_from_pem

source

fn public_key_from_pem(pem : String) -> String?

Inverse of public_key_to_pem. Accepts both upper- and lower-case hex inside the PEM envelope. Returns None when the input doesn't look like a MoonGuard public key PEM.

public_key_to_pem

source

fn public_key_to_pem(public_key : String) -> String

PEM encode an Ed25519 public key for storage in .pem files. Format follows RFC 7468 section 13 ("PUBLIC KEY") which is the same shape libsodium / age / OpenSSH use for raw Ed25519 keys.

trust_store_from_json

source

fn trust_store_from_json(json : String) -> TrustStore?

Parse a trust_store_to_json document into a fresh store. Returns None when the document is malformed so the caller can surface a useful error rather than a partial store.

trust_store_to_json

source

fn trust_store_to_json(store : TrustStore) -> String

Stable JSON encoding used by both the CLI and the file persistence path. Kept in one place so the wire format stays consistent across consumers.

validate_public_key_format

source

fn validate_public_key_format(public_key : String) -> Bool

Source Files

trust.mbt

Install

Download zip

MoonGuard is a pure-MoonBit supply chain security toolchain providing Ed25519 package signing and verification, SHA-256 manifest integrity checks, JSON+PEM trusted key management, Levenshtein and homoglyph typosquat detection, CVSS-style cumulative risk scores, JSON security reports, and a `moon_guard` CLI with subcommands for keygen, sign, verify, trust, typosquat, manifest, hash, audit, and version. Includes a runnable end-to-end audit example at `examples/basic_audit`. MoonGuard 是用纯 MoonBit 实现的 MoonBit 包供应链安全工具链，提供 Ed25519 签名、SHA-256 清单、JSON+PEM 可信密钥管理、Levenshtein 与同形（homoglyph）双模式 typosquat 检测、CVSS 风格风险评分、JSON 安全报告与 9 子命令 CLI。

securitysupply-chainmoonbited25519sha256typosquatsupply-chain-securitymanifesttrust-storecode-signing依赖混淆供应链安全代码签名清单校验Typosquat 检测

chenzehaoo

Apache-2.0

github.com/chenzehaoo/MoonGUARD

Updated 2 months ago

85 downloads

Site source Report issue Modules Skills CLI Build queue Statistics

#TrustLevel

#TrustLevel::to_string

#TrustStore

#TrustStore::add_key

#TrustStore::find_by_owner

#TrustStore::get_key

#TrustStore::is_trusted

#TrustStore::key_count

#TrustStore::list_all

#TrustStore::new

#TrustStore::remove_key

#TrustStore::replace_all

#TrustStore::save_to_file

#TrustedKey

#load_store_from_file

#normalize_public_key

#public_key_from_pem

#public_key_to_pem

#trust_store_from_json

#trust_store_to_json

#validate_public_key_format

Source Files

TrustLevel

TrustLevel::to_string

TrustStore

TrustStore::add_key

TrustStore::find_by_owner

TrustStore::get_key

TrustStore::is_trusted

TrustStore::key_count

TrustStore::list_all

TrustStore::new

TrustStore::remove_key

TrustStore::replace_all

TrustStore::save_to_file

TrustedKey

load_store_from_file

normalize_public_key

public_key_from_pem

public_key_to_pem

trust_store_from_json

trust_store_to_json

validate_public_key_format