Support enforcing the checksum verification

[suzuki-shunsuke]

Feature Overview

Support enforcing the checksum verification by the environment variables.

Why is the feature needed?

To improve the security.
If you manage aqua.yaml on multiple directories in a Monorepo and you want to enforce the checksum verification for all aqua.yaml, this feature is useful.

Workaround

No response

Example Code

export AQUA_ENFORCE_CHECKSUM=true
export AQUA_ENFORCE_REQUIRE_CHECKSUM=true

If the environment variable is true, the checksum verification gets enabled even if it is disabled in aqua.yaml.

Note

No response

[suzuki-shunsuke]

The Configuration file setting checksum.require_checksum takes precedence over the environment variable AQUA_REQUIRE_CHECKSUM.

So we'll introduce the new environment variable AQUA_CHECKSUM, AQUA_ENFORCE_CHECKSUM, and AQUA_ENFORCE_REQUIRE_CHECKSUM.