mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
Add 'cozypkg search' to query the community package index, a directory of metadata-only entries (name, ociRef, description, maintainer, homepage, and an expected cosign signing identity) read from a local path or pulled from an oci:// reference. The index is configured with --index or COZYPKG_INDEX. Index loading is strict: an entry that fails to decode or omits name/ociRef is an error, so a malformed index surfaces rather than dropping entries silently. Wire short-name resolution into 'cozypkg tap': a non-oci:// argument is looked up in the index and resolved to its artifact reference. Bound 'flux pull artifact' with a timeout so an unreachable registry fails with a legible error instead of hanging. Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>