feat: add in-flight checksumming to prevent TOCTU attacks on build artifacts#243

Open

leodido wants to merge 6 commits intoleo/cache-verification-when-downloadingfrom

feature/in-flight-checksumming

Commits on Sep 26, 2025

Add checksum storage to build context for in-flight checksumming

leodido
and
ona-agent
committed
Implement checksum helper functions for in-flight checksumming

leodido
and
ona-agent
committed
Hook checksum recording after cache artifact creation

leodido
and
ona-agent
committed
Add end-of-build verification to complete TOCTU attack protection

leodido
and
ona-agent
committed
Add --in-flight-checksums CLI flag for TOCTU attack prevention

leodido
and
ona-agent
committed
Add comprehensive tests for in-flight checksumming security

leodido
and
ona-agent
committed