theupdateframework / tuf-on-ci

A TUF repository and signing tool
Other
19 stars 10 forks source link

periodic root bump does not modify root_history #347

Closed jku closed 1 month ago

jku commented 2 months ago

Modifying root using tuf-on-ci-delegate leads to also creating a copy of the file in root_history/. It seems this does not happen when create-signing-event creates a new version of root but should. This is not critical as the first signing will include the missing file... but it creates commits that are a bit unobvious.

I think this just requires CIRepository.close() to handle this special case: after writing the actual file, also write f"root_history/{version}.{role}.json".