Files
crewAI/lib
Devin AI 250b9f5815 fix: remove hardcoded private key placeholders from docstrings and add signing tests
- Replace '-----BEGIN PRIVATE KEY-----...' and '-----BEGIN PUBLIC KEY-----...'
  placeholders in docstring examples with '<PEM-encoded private key>' and
  '<PEM-encoded public key>' to avoid triggering security scanners.
- Add comprehensive test suite for agent_card_signing.py (40 tests) covering:
  - Key normalization (bytes, str, SecretStr)
  - AgentCard serialization (JSON validity, determinism, signature exclusion)
  - Base64url encoding (padding, URL safety, roundtrip)
  - RSA signing and verification
  - EC (ES256) signing and verification
  - Tampered card detection
  - Corrupted signature handling
  - Key ID extraction from protected/unprotected headers
  - Assertion that no hardcoded PEM key headers exist in source

Closes #4864

Co-Authored-By: João <joao@crewai.com>
2026-03-14 05:27:33 +00:00
..
2026-03-14 00:34:12 -04:00