Add signature verification metadata

Author: huanfeng

cmd/bucket.go

@@ -17,6 +17,8 @@ var bucketCmd = &cobra.Command{
 	Long:  `Manage APK repository buckets (sources) for the client functionality.`,
 }
 
+var bucketVerifySignature bool
+
 var bucketListCmd = &cobra.Command{
 	Use:   "list",
 	Short: "List all configured buckets",
@@ -108,6 +110,7 @@ var bucketAddCmd = &cobra.Command{
 		// Update bucket index
 		fmt.Printf("Fetching bucket manifest...\n")
 		bucketMgr := client.NewBucketManager(config)
+		bucketMgr.SetSignatureVerification(bucketVerifySignature && config.Security.VerifySignature)
 		if _, err := bucketMgr.FetchManifest(name); err != nil {
 			fmt.Printf("Warning: Failed to fetch manifest: %v\n", err)
 			fmt.Println("You can try updating later with 'apkhub bucket update'")
@@ -169,6 +172,7 @@ var bucketUpdateCmd = &cobra.Command{
 		}
 
 		bucketMgr := client.NewBucketManager(config)
+		bucketMgr.SetSignatureVerification(bucketVerifySignature && config.Security.VerifySignature)
 
 		if len(args) > 0 {
 			// Update specific bucket
@@ -517,6 +521,8 @@ func formatBytes(bytes int64) string {
 func init() {
 	rootCmd.AddCommand(bucketCmd)
 
+	bucketCmd.PersistentFlags().BoolVar(&bucketVerifySignature, "verify-signature", true, "Verify bucket manifest signatures (set false to bypass)")
+
 	// Add subcommands
 	bucketCmd.AddCommand(bucketListCmd)
 	bucketCmd.AddCommand(bucketAddCmd)

cmd/update.go

@@ -25,6 +25,7 @@ Examples:
 		}
 
 		bucketMgr := client.NewBucketManager(config)
+		bucketMgr.SetSignatureVerification(bucketVerifySignature && config.Security.VerifySignature)
 
 		if len(args) > 0 {
 			// Update specific bucket
@@ -39,7 +40,7 @@ Examples:
 			if updateAll {
 				// Update all buckets including disabled ones
 				fmt.Println("🔄 Updating all buckets (including disabled)...")
-				
+
 				for name := range config.Buckets {
 					fmt.Printf("📡 Fetching '%s'...\n", name)
 					if _, err := bucketMgr.FetchManifest(name); err != nil {
@@ -65,7 +66,8 @@ var updateAll bool
 
 func init() {
 	rootCmd.AddCommand(updateCmd)
-	
+
 	// Add flags
 	updateCmd.Flags().BoolVar(&updateAll, "all", false, "Update all buckets including disabled ones")
-}
+	updateCmd.Flags().BoolVar(&bucketVerifySignature, "verify-signature", true, "Verify bucket manifest signatures during update")
+}