Recompute checksums of files and compare against security.
Files present on disk but absent from the checksum list (other than
security.json and signature.sig) are reported as uncovered-file. A
package without security.json cannot be verified and is reported invalid
with a missing-security-file issue.
Recompute checksums of
filesand compare againstsecurity. Files present on disk but absent from the checksum list (other thansecurity.jsonandsignature.sig) are reported asuncovered-file. A package without security.json cannot be verified and is reported invalid with amissing-security-fileissue.