tests: add test for sigstore-js

sigstore / root-signing-staging

Staging TUF repository for Sigstore trust root

https://tuf-repo-cdn.sigstage.dev/

Apache License 2.0

3 stars 5 forks source link

Closed jku closed 2 months ago

jku commented 3 months ago

source: #79

sigstore-js contains a CLI: https://github.com/sigstore/sigstore-js/tree/main/packages/cli
there are arguments for --root and --mirror
it should be trivial to add a test to https://github.com/sigstore/root-signing-staging/blob/main/.github/workflows/custom-test.yml
just a verify call works for me (we can add an existing bundle in git) but attest+verify seems doable like the other clients do sign+verify

jku commented 3 months ago

This is about essentially replacing the root-signing tuf_client_tests.yml with actual sigstore client tests