sonarqube-scan-action/dist
Claire Villard 79d962c4f8 SQSCANGHA-140 Add fallback keyserver for GPG signature verification
Add hkps://keys.openpgp.org as fallback keyserver to improve reliability
when the primary keyserver (keyserver.ubuntu.com) is unavailable due to
outages, network issues, or rate limiting.

Changes:
- Extract key import logic into tryImportKey() helper function
- Implement automatic fallback in importSonarSourceKey()
- Add comprehensive error messages showing both keyserver failures
- Add integration tests verifying fallback mechanism
- Update JSDoc to document fallback behavior
- Rebuild distribution

The implementation maintains backward compatibility with no changes to
function signatures or default behavior. Primary keyserver is always
attempted first.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-04-27 18:39:12 +02:00
..
core-DpWEmnbG.js SQSCANGHA-134 Upgrade the libraries to latest version (#227) 2026-04-14 15:21:19 +02:00
core-DpWEmnbG.js.map SQSCANGHA-134 Upgrade the libraries to latest version (#227) 2026-04-14 15:21:19 +02:00
exec-BTlTa8sL.js SQSCANGHA-107 Migrate install-build-wrapper 2025-09-18 10:38:53 +02:00
exec-BTlTa8sL.js.map SQSCANGHA-107 Migrate install-build-wrapper 2025-09-18 10:38:53 +02:00
exec-zlpfwmpH.js SQSCANGHA-140 Implement OpenPGP signature verification for scanner downloads 2026-04-27 17:54:16 +02:00
exec-zlpfwmpH.js.map SQSCANGHA-140 Implement OpenPGP signature verification for scanner downloads 2026-04-27 17:54:16 +02:00
index.js SQSCANGHA-140 Add fallback keyserver for GPG signature verification 2026-04-27 18:39:12 +02:00
index.js.map SQSCANGHA-140 Add fallback keyserver for GPG signature verification 2026-04-27 18:39:12 +02:00
install-build-wrapper.js SQSCANGHA-140 Implement OpenPGP signature verification for scanner downloads 2026-04-27 17:54:16 +02:00
install-build-wrapper.js.map SQSCANGHA-140 Implement OpenPGP signature verification for scanner downloads 2026-04-27 17:54:16 +02:00