jku / repository-playground

Community artifact repository workflow experiments
Other
7 stars 4 forks source link

old root signers should sign new root as well #107

Closed jku closed 1 year ago

jku commented 1 year ago

Looking at the code I think there's an issue with root signing when signers are removed. In this case

root v2 should in the end be signed by both A and B but I think currently when A runs playground-sign, it won't sign as _user_signature_needed() does not look into the known good root signers

There is a related testing issue #106