plugin_bad_allow

Summary

malformed allowed entry `{0}`

Help

entries must look like sha256:<64-hex>

Details

When this fires

Policy::from_cfg walked [plugins].allowed and AllowEntry::parse rejected one of the strings. Either the prefix isn't a known algo (the recognised set is sha256 and sha512, see policy::Algo), or the hex part is the wrong length / contains non-hex chars. The diagnostic underlines the exact TOML literal in your config so you can spot the typo.

What to check

Format is sha256:<64-hex> or sha512:<128-hex>, no whitespace, no bare hash without the prefix. Copy the hash from nanook plugins inspect (or sha256sum / sha512sum) so you don't paste a truncated value.

[plugins]
allowed = [
  "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
]