git-authenticate: Prevent removal of '.guix-authorizations'.

* guix/git-authenticate.scm (commit-authorized-keys)
[parents-have-authorizations-file?, assert-parents-lack-authorizations]:
New procedures.
Use the latter before returning DEFAULT-AUTHORIZATIONS.
* guix/git.scm (false-if-git-not-found): Export.
* guix/tests/git.scm (populate-git-repository): Add 'remove' clause.
* tests/git-authenticate.scm ("signed commits, .guix-authorizations removed"):
New test.
This commit is contained in:
Ludovic Courtès 2020-06-07 23:06:41 +02:00
parent 1fd7de45f2
commit e782756080
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5
4 changed files with 72 additions and 1 deletions

View file

@ -39,6 +39,7 @@
honor-system-x509-certificates!
with-repository
false-if-git-not-found
update-cached-checkout
url+commit->name
latest-repository-commit