Prototype signed catalog fallback (T-101)

2026-07-16 16:13:18 +08:00
parent 45c242ecec
commit 0d6ed05d7e
15 changed files with 959 additions and 10 deletions
@@ -0,0 +1,8 @@
+{
+  "schema_version": 1,
+  "channel": "modern",
+  "generated_at": "2026-07-16T00:00:00Z",
+  "min_box_version": "1.0.0",
+  "apps": [],
+  "signature": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": 1,
+  "channel": "modern",
+  "generated_at": "2026-07-16T00:00:00Z",
+  "min_box_version": "1.0.0",
+  "apps": [
+    {
+      "id": "json-parser",
+      "name": "JSON解析工具",
+      "description": "攻击者修改了版本但复用了旧签名",
+      "version": "9.9.9",
+      "channel": "stable",
+      "status": "active",
+      "tags": ["工具", "JSON"],
+      "min_os": "windows-10",
+      "architectures": ["amd64"],
+      "entry_exe": "JsonParser.exe",
+      "requires_admin": false,
+      "packages": {
+        "amd64": {
+          "url": "https://download.invalid/forged.zip",
+          "size": 42,
+          "sha256": "forged-sha256-placeholder",
+          "signature": "forged-package-signature-placeholder"
+        }
+      }
+    }
+  ]
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": 1,
+  "channel": "modern",
+  "generated_at": "2026-07-16T00:00:00Z",
+  "min_box_version": "1.0.0",
+  "apps": [
+    {
+      "id": "json-parser",
+      "name": "JSON解析工具",
+      "description": "仅用于测试的清单项",
+      "version": "1.2.0",
+      "channel": "stable",
+      "status": "active",
+      "tags": ["工具", "JSON"],
+      "min_os": "windows-10",
+      "architectures": ["amd64"],
+      "entry_exe": "JsonParser.exe",
+      "requires_admin": false,
+      "packages": {
+        "amd64": {
+          "url": "https://download.invalid/json-parser.zip",
+          "size": 42,
+          "sha256": "test-sha256-placeholder",
+          "signature": "test-package-signature-placeholder"
+        }
+      }
+    }
+  ]
+}