Find a good way to reduce the toil related to refreshing wiremock recordings of Sigstore/TUF used in acceptance tests

enterprise-contract / ec-cli

Supply chain artifact verifier and policy checker

https://enterprisecontract.dev/docs/ec-cli/

Apache License 2.0

27 stars 29 forks source link

Open simonbaird opened 4 months ago

simonbaird commented 4 months ago

Background:

Using production Sigstore gives 6 month expiration.
Using stage Sigstore gives shorter expiration.
Spinning up a local instance does work but it's resource intensive, (could run in GitHub though).
Could we somehow produce a 100 year expiration for test data and never worry about this again?