Trust buildpacks in addition to those on the builder

[AidanDelaney]

Trust buildpacks provided when --buildpack is provided on the command line.

Summary

Adds a --trust-extra-buiildpacks which applies to those buildpacks provided in addition to the buildpacks on a trusted builder.

Documentation

• Should this change be documented?
  • Yes, see #___
  • No

Related

Resolves #2228

[natalieparellano]

Looks good to me. What do you think about --trust-extra-buildpacks as slightly less verbose?

[edmorley]

Some other ideas to add to the pile :-)

• --trust-external-buildpacks
• --trust-all-buildpacks

[AidanDelaney]

I think -extra- is the best describer. Will update.

[edmorley]

Would it be possible to release this in a v0.35.1 release rather than waiting to v0.36.0 (which would presumably be further out)? :-)

(I've had to remain on Pack v0.34.x locally and in CI, since otherwise #2228 means our integration tests fail. I'd love to be able to update to pick up some of the other fixes in v0.35.0 like #2197 and #2205. With this PR released I could then update our test runner to set --trust-extra-buildpacks which would fix the tests.)

[natalieparellano]

@edmorley I think we could cut a v0.35.1

[edmorley]

I think we could cut a v0.35.1

Thank you :-) Do you know when that might be?

[natalieparellano]

@edmorley we could cut it this week. I want to also land these PRs: https://github.com/buildpacks/pack/milestone/56

(The amount of actual work required is very small)

[edmorley]

That would be great! I know I don't have official review access, but I've reviewed those two open PRs in case it helps :-)

[edmorley]

Thank you for the Pack 0.35.1 release :-)

[edmorley]

@AidanDelaney I don't suppose you could update the PR description to match the updated arg name (--trust-extra-buildpacks)? I just copied the arg name from the current PR description (which has the old arg name) into several issues/PRs mistakenly :-)