test addon installs are blocked or not blocked

mozilla-services / autograph-canary

An AWS lambda for checking Autograph signing is working correctly

0 stars 1 forks source link

test addon installs are blocked or not blocked #75

Open g-k opened 3 years ago

g-k commented 3 years ago

see also #43

Currently, we only test that an addon installs in https://github.com/mozilla-services/autograph-canary/blob/main/tests/addon_signature_test.js#L106

but we should update the blocklist then check that an addon install is blocked or not blocked for the following cases:

[ ] a known blocked addon is blocked
[ ] a known unblocked addons is not blocked
[ ] newly signed addons are not blocked (I'm not sure what a sufficiently large set would be)

g-k commented 3 years ago

cc @Rob--W @willdurand

g-k commented 3 years ago

Blocked on https://mozilla-hub.atlassian.net/browse/ITSEC-79

I need to get some SRE bandwidth to help debug deploying on Fargate https://github.com/mozilla-services/cloudops-deployment/pull/4344 Alternatively we could migrate to Taskcluster since it already runs xpcshell tests, but I'm not sure how suitable it is for continuous monitoring workloads.