Skip to content

Conversation

@smvdheijden
Copy link
Contributor

No description provided.

Copilot AI review requested due to automatic review settings September 29, 2025 10:08
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR integrates an external OSLP message signing library to replace the existing custom signing implementation, adding dependency on com.gxf.utilities:oslp-message-signing library.

  • Replaces custom SigningUtil object with external signing library integration
  • Refactors key management to implement KeyProvider interface from the external library
  • Updates build configuration to include the new signing library dependency

Reviewed Changes

Copilot reviewed 11 out of 12 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
settings.gradle.kts Removes custom plugin and dependency management configurations
gradle/libs.versions.toml Adds version declarations for the new signing library
composeApp/src/desktopMain/kotlin/org/lfenergy/gxf/oslp/util/OslpSigningUtil.kt New wrapper class extending the external SigningUtil
composeApp/src/desktopMain/kotlin/org/lfenergy/gxf/oslp/util/OslpKeyProvider.kt Refactors existing SigningUtil to implement KeyProvider interface
composeApp/src/desktopMain/kotlin/org/lfenergy/gxf/oslp/sockets/receive/ReceiveStrategy.kt Updates to use new OslpSigningUtil wrapper
composeApp/src/desktopMain/kotlin/org/lfenergy/gxf/oslp/service/RequestService.kt Updates to use new OslpSigningUtil wrapper
composeApp/src/desktopMain/kotlin/org/lfenergy/gxf/oslp/Main.kt Updates initialization to use the new signing utility
composeApp/proguard-rules.pro Adds ProGuard rules for the new library and suppresses warnings
composeApp/build.gradle.kts Adds dependency on the new signing library
.github/workflows/build.yaml Adds GitHub token environment variable for private registry access
.github/dependabot.yaml Configures Dependabot to access private Maven registry

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.


if (isConfigured) {
if (OslpSigningUtil.getInstance().oslpKeyProvider.initializeKeys()) {
config.storeConfiguration()
Copy link

Copilot AI Sep 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This change removes the assignment to isConfigured variable. The variable isConfigured is likely used elsewhere in the code, and this change may break the configuration flow logic.

Suggested change
config.storeConfiguration()
config.storeConfiguration()
isConfigured = true

Copilot uses AI. Check for mistakes.
type: maven-repository
url: https://maven.pkg.github.com/osgp/
username: IoTFDP
password: ${{secrets.IOTFDP_GITHUB_TOKEN}}
Copy link

Copilot AI Sep 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The secret reference uses incorrect syntax. GitHub Actions secrets should be referenced as ${{ secrets.SECRET_NAME }} (with spaces around the braces), not ${{secrets.SECRET_NAME}}.

Suggested change
password: ${{secrets.IOTFDP_GITHUB_TOKEN}}
password: ${{ secrets.IOTFDP_GITHUB_TOKEN }}

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants