feat(inspectors): add chisel-releases inspector
Metadata
Current evaluation
Merged into main following resolution of conflicts with #333. Introduces the chisel-releases inspector, including default config for GitHub metadata access, updated multi-key decoding, and a validation spread test. Approved by two reviewers with all CI checks passing.
Suggested action: —
No scores available.
Issue body
This PR is a follow-up to #333, which never got merged. I merged in `main` and resolved the few conflicts, plus added some new commits:
- Added default config to allow access to `https://codeload.github.com:443/canonical/chisel-releases/`, which is where the chisel metadata lives;
- Update a key-decoding function to support multiple public keys, because chisel hits the esm archives and the default config [for those](https://codeload.github.com:443/canonical/chisel-releases/) has multiple keys
- Added a spread test to actually validate the inspector.
Other than that, the original code by Rafid is unchanged.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged into main following resolution of conflicts with #333. Introduces the chisel-releases inspector, including default config for GitHub metadata access, updated multi-key decoding, and a validation spread test. Approved by two reviewers with all CI checks passing. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #333 feat(inspectors): add chisel release inspector | fetch-service | closed | Added a chisel release inspector to verify tarball downloads. The contribution was closed without merging after the author departed the project, leaving unresolved review comments and suggesting a new PR be opened instead. | |
| #679 docs: update chisel how-to guides | rockcraft | merged | Merged update to chisel how-to guides adding the chisel find command and chisel-releases integration tests. Approved by reviewers and passed CI checks. | |
| #4441 feat: enable chisel | snapcraft | merged | Merged into main after passing CI and receiving approval from two reviewers. The change enables chisel, adding 45 lines across three files with no test coverage impact. | |
| #1368 feat(chisel): ignore unmaintained/unstable releases | craft-parts | merged | Merged changes configuring chisel to ignore unmaintained or unstable releases, resolving #1159 and CRAFT-4636. Requires chisel >= 1.3.0. Approved by two reviewers with all CI checks passing across multiple platforms. | |
| #622 chore(ci): update chisel | craft-parts | merged | Merged CI configuration update to upgrade chisel, resolving compatibility breaks with chisel-releases v0.8.1+. Approved by two reviewers with passing CI checks. Requires cherry-picking to live hotfix branches. |