mirror of
https://github.com/crewAIInc/crewAI.git
synced 2026-05-04 16:52:37 +00:00
- Replace '-----BEGIN PRIVATE KEY-----...' and '-----BEGIN PUBLIC KEY-----...' placeholders in docstring examples with '<PEM-encoded private key>' and '<PEM-encoded public key>' to avoid triggering security scanners. - Add comprehensive test suite for agent_card_signing.py (40 tests) covering: - Key normalization (bytes, str, SecretStr) - AgentCard serialization (JSON validity, determinism, signature exclusion) - Base64url encoding (padding, URL safety, roundtrip) - RSA signing and verification - EC (ES256) signing and verification - Tampered card detection - Corrupted signature handling - Key ID extraction from protected/unprotected headers - Assertion that no hardcoded PEM key headers exist in source Closes #4864 Co-Authored-By: João <joao@crewai.com>