Add sigstore-java to the test set

sigstore / root-signing-staging

Staging TUF repository for Sigstore trust root

https://tuf-repo-cdn.sigstage.dev/

Apache License 2.0

3 stars 5 forks source link

Add sigstore-java to the test set #132

Closed jku closed 1 month ago

jku commented 1 month ago

Add sigstore-java to the custom client tests:

Use the new --staging-with-tuf-url-override flag
The CLI used here is not a real application but a testing tool so we need to build it from source: try to checkout the latest release tag to do that

For context, I'm not 100% convinced root-signing* should test all possible clients in the future... but for the production tuf-on-ci migration a test matrix as large as possible seems like good idea.

jku commented 1 month ago

test run https://github.com/jku/root-signing-staging/actions/runs/9300975021/job/25598173281