search

sigstore / sigstore-python

A Sigstore client written in Python
https://pypi.org/p/sigstore
Other
233 stars 49 forks source link

_cli: add `plumbing update-trust-root` #1174

Closed woodruffw closed 1 month ago

woodruffw commented 1 month ago

This adds a new plumbing-level command: update-trust-root. When run, sigstore plumbing update-trust-root will perform a TUF update for the appropriate production or staging trust root, depending on whether the top-level --staging flag is used.

Closes #1172.

CC @mgorny if you can, it'd be great to have you trial this locally to confirm it meets your needs! In particular it'd be useful to know if you'd prefer it to be "louder" in terms of outputs, i.e. print something on stdout/stderr.

mgorny commented 1 month ago

Yeah, seems to work fine. My personal weak preference is for more verbose output, particularly if it could help us debug issues in the future. Thanks!

woodruffw commented 1 month ago

Yeah, seems to work fine. My personal weak preference is for more verbose output, particularly if it could help us debug issues in the future. Thanks!

No problem! And makes sense -- I'll mess around with potential outputs here.