mitchellh / mitchellh/vouch

Web of Trust

Open
#4 13 comments 7 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Nushell
Stars
5.1k
Forks
91
PR merge metrics
No merged PRs in 30d

Description

I want to implement this feature from the README:

Vouch lists can also form a web of trust. You can configure Vouch to read other project's lists of vouched or denounced users. This way, projects with shared values can share their trust decisions with each other and create a larger, more comprehensive web of trust across the ecosystem. Users already proven to be trustworthy in one project can automatically be assumed trustworthy in another project, and so on.

I think the cleanest way to do this is:

  • Allow all our Nu functions to take a list of vouch files (in priority order).
  • Add a GitHub action that downloads and syncs a set of remote vouch files (via HTTP)
  • Add a param to our existing check action(s) to take a directory of vouch files (loaded in filesystem sort order).
  • Our own vouch file should always take top priority

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the README section describing web-of-trust vouch lists, then inspect the Nu functions and existing check actions mentioned in the issue. Define how priority works for multiple files, how remote files are synchronized, and how directory ordering is applied. Done means local and remote vouch lists can be combined while the project's own file remains highest priority.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, shell
Domain
ci-cd, cli, devops
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.