feat(aqua): pass --verbose flag down to cosign and added aqua.cosign_…

…extra_args setting (#4148)
jdx · Jan 17, 2025 · f1dec69 · f1dec69
1 parent 2d32a6d
commit f1dec69
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 0 deletions.
diff --git a/schema/mise.json b/schema/mise.json
@@ -246,6 +246,13 @@
               "description": "Use cosign to verify aqua tool signatures.",
               "type": "boolean"
             },
+            "cosign_extra_args": {
+              "description": "Extra arguments to pass to cosign when verifying aqua tool signatures.",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
             "minisign": {
               "default": true,
               "description": "Use minisign to verify aqua tool signatures.",

diff --git a/settings.toml b/settings.toml
@@ -61,6 +61,13 @@ type = "Bool"
 default = true
 description = "Use cosign to verify aqua tool signatures."
 
+[aqua.cosign_extra_args]
+env = "MISE_AQUA_COSIGN_EXTRA_ARGS"
+type = "ListString"
+rust_type = "Vec<String>"
+optional = true
+description = "Extra arguments to pass to cosign when verifying aqua tool signatures."
+
 [aqua.minisign]
 env = "MISE_AQUA_MINISIGN"
 type = "Bool"

diff --git a/src/backend/aqua.rs b/src/backend/aqua.rs
@@ -442,6 +442,9 @@ impl AquaBackend {
                 let mut cmd = CmdLineRunner::new(cosign_bin)
                     .arg("verify-blob")
                     .arg(checksum_path);
+                if log::log_enabled!(log::Level::Debug) {
+                    cmd = cmd.arg("--verbose");
+                }
                 if cosign.experimental == Some(true) {
                     cmd = cmd.env("COSIGN_EXPERIMENTAL", "1");
                 }
@@ -466,6 +469,9 @@ impl AquaBackend {
                 for opt in cosign.opts(pkg, v)? {
                     cmd = cmd.arg(opt);
                 }
+                for arg in SETTINGS.aqua.cosign_extra_args.clone().unwrap_or_default() {
+                    cmd = cmd.arg(arg);
+                }
                 cmd = cmd.with_pr(&ctx.pr);
                 cmd.execute()?;
             } else {