Skip to content

Instantly share code, notes, and snippets.

@lrvick
Created January 21, 2022 10:36
Show Gist options
  • Save lrvick/c2fcd816c1cd19af15c7dad7f3cc4bc4 to your computer and use it in GitHub Desktop.
Save lrvick/c2fcd816c1cd19af15c7dad7f3cc4bc4 to your computer and use it in GitHub Desktop.
Example verification policy for OpenPGP based on arbitrary metadata values present in signatures in value ranges that must come from respective groups
[{
name: "release-engineers",
min: 1,
members: ['fingerprint1', 'fingerprint2'],
metadata: {
thoroughness: { min: 2 },
understanding: { min: 4 },
rating: { present: true }
}
},
{
name: "engineers",
min: 3,
members: ['fingerprint1', 'fingerprint2','fingerprint3']
metadata: {
thoroughness: { min: 1 },
understanding: { min: 2 },
rating: { present: true }
}
}]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment