We've added a new signature to the GeoTrellis public key to extend the validity of the signing subkey.
This change set receives the latest copy of the public key at the start of the cipublish build stage, allowing us to "renew" the key in the future without needing to update the key pair stored in CircleCI secrets.
Checklist
[x] Description of PR is in an appropriate section of the CHANGELOG and grouped with similar changes if possible
Overview
We've added a new signature to the GeoTrellis public key to extend the validity of the signing subkey.
This change set receives the latest copy of the public key at the start of the
cipublishbuild stage, allowing us to "renew" the key in the future without needing to update the key pair stored in CircleCI secrets.Checklist
Testing Instructions
See CircleCI build: https://app.circleci.com/pipelines/github/geotrellis/maml/194/workflows/653a1f28-9328-40e6-8f90-6f6e9e450868/jobs/539/steps
Connects https://github.com/azavea/operations/issues/446