Primora/apps/desktop/src-tauri/capabilities/default.json at 0511e5754bd66b0cc5a07f20724e8691cce48a79 - Primora - TDvorak Gitea

TDvorak/Primora

0 Fork 0

mirror of https://github.com/Dvorinka/Primora.git synced 2026-10-28 07:41:23 +00:00

Files

T

Tomas DvorakandDevin edef002beb feat: Desktop auto-updater + release SBOMs

- tauri-plugin-updater + process: pubkey embedded in tauri.conf.json,
  createUpdaterArtifacts, endpoint = GitHub latest.json manifest.
- Connect screen checks before auto-connect (bounded 5s) — a saved
  URL would otherwise navigate away before the check resolves.
  "Update & restart" downloads, verifies minisign, installs, relaunches.
- Release workflow signs updater artifacts with
  TAURI_SIGNING_PRIVATE_KEY secrets, ships the .sig files, and assembles
  latest.json from them. No key → no manifest → no update, never a
  silent unsigned install.
- anchore/sbom-action emits CycloneDX SBOMs per GHCR image plus the
  source tree, attached to every release.

Note: the signing keypair was generated locally
(~/.tauri/primora-updater.key); the private half must be added to repo
secrets before the next release for updates to activate.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-09-24 20:41:16 +02:00

8 lines

247 B

JSON

Raw Blame History

 {
   "$schema": "../gen/schemas/desktop-schema.json",
   "identifier": "default",
   "description": "Default capabilities for the main window",
   "windows": ["main", "vault"],
   "permissions": ["core:default", "updater:default", "process:default"]
 }