Signing event: sign/targets-v8

sigstore / root-signing-staging

Staging TUF repository for Sigstore trust root

https://tuf-repo-cdn.sigstage.dev/

Apache License 2.0

3 stars 5 forks source link

Signing event: sign/targets-v8 #125

Closed sigstore-bot closed 1 month ago

sigstore-bot commented 1 month ago

Processing signing event sign/targets-v8, please wait.

sigstore-bot commented 1 month ago

Current signing event state

Event sign/targets-v8 (commit a8e175f)

:x: targets

Role targets is unsigned and not yet verified Still missing signatures from @jku, @kommendorkapten, @mnm678, @joshuagl Signers can sign these changes by running tuf-on-ci-sign sign/targets-v8

jku commented 1 month ago

before signing: let's agree on if we want to bump one of [targets, root] signing period to very long. I think that would make sense:

we can preserve the security properties we want with just signing a single role
the automation does not then create two signing events

jku commented 1 month ago

I will close this one for now, see #126