GovOPlaN/govoplan-core
2
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity

Validate module catalog provenance and availability

Browse Source
This commit is contained in:
zemion
2026-08-06 22:42:08 +02:00
parent 9ceb1b8c22
commit 44196f5620
5 changed files with 216 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/MODULE_ARCHITECTURE.md
+4 -2
View File
@@ -1377,8 +1377,10 @@ The package install-plan API records operator intent only:
- `GET /api/v1/admin/system/modules/package-catalog` reads approved package
references from `GOVOPLAN_MODULE_PACKAGE_CATALOG` so operators can add known
module refs to the install plan without typing them manually. The endpoint
also reports catalog validity, channel, signature, trust state, and the
configured path.
also reports catalog validity, channel, signature, trust state, source and
artifact provenance, release availability, configuration requirements, and
per-entry compatibility/blocker state. Withdrawn entries are visible for
diagnosis but cannot be planned.
- `POST /api/v1/admin/system/modules/install-plan/catalog/{module_id}` saves
a planned install or update row from a validated catalog entry. Installed
modules are planned as updates. Catalog signature and approved-channel policy