guildhouse-spire-plugins/cmd
Tyler J King 490c813586 fix(gsap-attestor): use spire-plugin-sdk for SPIRE compatibility
The original implementation used hashicorp/go-plugin directly with a
custom handshake, which SPIRE rejected. Switch to spire-plugin-sdk's
pluginmain.Serve() for correct WorkloadAttestor protocol negotiation,
implement ConfigServer for plugin_data parsing, and return selector
values in key:value format (SPIRE infers the type prefix from the
plugin name). Config decoding tries JSON first (chart renders YAML
as JSON) then falls back to HCL.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-13 06:37:37 -04:00
..
governance-notifier feat: network-policy extension, governance lifecycle, audit remediation 2026-03-18 15:54:46 -04:00
gsap-attestor fix(gsap-attestor): use spire-plugin-sdk for SPIRE compatibility 2026-05-13 06:37:37 -04:00
keylime-attestor feat(spire): Keylime node attestor plugin — single TPM authority 2026-04-15 20:35:45 -04:00
oidc-attestor feat: network-policy extension, governance lifecycle, audit remediation 2026-03-18 15:54:46 -04:00
ssh-credential-composer feat: network-policy extension, governance lifecycle, audit remediation 2026-03-18 15:54:46 -04:00
substrate-keymanager feat: network-policy extension, governance lifecycle, audit remediation 2026-03-18 15:54:46 -04:00