molecule-core/workspace-server
Hongming Wang d17f57e29f fix(plugins): wire VerifyManifestIntegrity into install pipeline
The supply_chain.go implementation was merged in #937 but never called
from the actual install handler. Plugins with a manifest.json sha256
field now get verified before staging completes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-18 01:15:26 -07:00
..
cmd/server
internal fix(plugins): wire VerifyManifestIntegrity into install pipeline 2026-04-18 01:15:26 -07:00
migrations
pkg/provisionhook
.gitignore chore: final open-source cleanup — binary, stale paths, private refs 2026-04-18 00:38:55 -07:00
Dockerfile fix: Dockerfile go.sum path after platform → workspace-server rename 2026-04-18 00:31:16 -07:00
Dockerfile.tenant
entrypoint-tenant.sh
go.mod
go.sum