Evan Rusackas 4ae0bc9ade feat(extensions): add security trust configuration and signature verification ...

Implements a comprehensive security system for Superset extensions:

Backend:
- Add EXTENSIONS_TRUST_CONFIG to superset_config.py for admin control
- Create ExtensionSecurityManager for trust validation and signature verification
- Support Ed25519 signatures for extension manifests
- Integrate trust validation into extension loading pipeline

CLI:
- Add `generate-keys` command for creating Ed25519 signing keypairs
- Add `sign` command and `--sign` option to `bundle` for manifest signing

Frontend:
- Add WASM support to webpack config for QuickJS sandbox
- Update Extension interface with trust-related fields
- ExtensionsManager now uses backend-validated trust levels

Documentation:
- Add Administrator Configuration guide for trust settings
- Add Extension Signing guide for developers
- Update security.md and sandbox.md with cross-references
- Add Security subcategory to sidebar

Tests:
- Add 21 unit tests for trust validation and signature verification

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-07 23:43:07 -08:00

..

contributing

docs: federate scattered markdown files into centralized docs (#36756)

2026-01-21 13:00:54 -08:00

extensions

feat(extensions): add security trust configuration and signature verification

2026-02-07 23:43:07 -08:00

guidelines

docs: federate scattered markdown files into centralized docs (#36756)

2026-01-21 13:00:54 -08:00

testing

docs: federate scattered markdown files into centralized docs (#36756)

2026-01-21 13:00:54 -08:00

index.md

docs: federate scattered markdown files into centralized docs (#36756)

2026-01-21 13:00:54 -08:00

sidebars.js

feat(extensions): add security trust configuration and signature verification

2026-02-07 23:43:07 -08:00

versions.json

…