Module: Gem::Guardian::ChecksumProvider

Defined in:

lib/gem/guardian/checksum_provider.rb

Overview

Pluggable checksum providers for registry or publisher supplied SHA256 data.

A provider answers one question:

"Is there an independent SHA256 for this dependency, and where did it come from?"

Providers are intentionally separate from artifact hashing. The downloaded .gem file is always hashed locally by Verifier; provider results are independent trust anchors that can be compared with that artifact digest.

Defined Under Namespace

Classes: CompactIndex, Result, RubyGemsApi, SourceScoped, Url