Function ExtractTgzPluginMetadata

internal/plugin/sign.go:56–91

ExtractTgzPluginMetadata extracts plugin metadata from a gzipped tarball reader

(r io.Reader)

// ExtractTgzPluginMetadata extracts plugin metadata from a gzipped tarball reader
func ExtractTgzPluginMetadata(r io.Reader) (*Metadata, error) {
	gzr, err := gzip.NewReader(r)
	if err != nil {
		return nil, err
	}
	defer gzr.Close()

	tr := tar.NewReader(gzr)
	for {
		header, err := tr.Next()
		if errors.Is(err, io.EOF) {
			break
		}
		if err != nil {
			return nil, err
		}

		// Look for plugin.yaml file
		if filepath.Base(header.Name) == "plugin.yaml" {
			data, err := io.ReadAll(tr)
			if err != nil {
				return nil, err
			}

			// Parse the plugin metadata
			metadata, err := loadMetadata(data)
			if err != nil {
				return nil, err
			}

			return metadata, nil
		}
	}

	return nil, errors.New("plugin.yaml not found in tarball")
}

// parsePluginMessageBlock parses a signed message block to extract plugin metadata and checksums
func parsePluginMessageBlock(data []byte) (*Metadata, *provenance.SumCollection, error) {