sassoftware / relic

Relic is a service and a tool for adding digital signatures to operating system packages for Linux and Windows
Apache License 2.0
153 stars 41 forks source link

Implement a sign-many command for better performance #36

Open tomasr opened 1 year ago

tomasr commented 1 year ago

This is a proposed potential way to add the functionality to (sign multiple files at a time)[https://github.com/sassoftware/relic/issues/34] when using the local client tool instead of the separate server process.

May not be the best way to go about it, but seemed like the simpler option, as it's very similar to the existing sign command but without support for stdin for input.

If you're signing multiple packages of the same type using an HSM or Cloud-backed token, the performance gains are substantial compared to doing it one at a time.