New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

signing event testing #414

Open

jku opened this issue Aug 27, 2024 · 0 comments

Member

jku commented Aug 27, 2024

The issue with testing signing event contents is that

a repository can only be tested by clients when it's fully signed
We do not want to sign before testing (and in case of online timestamp/snapshot, we can't sign before merging the signing event)

We could do this:

in a test environment, replace every key with a temporary key
Fully sign a version of this dummy repository
test this dummy repository with clients

This obviously would not really test key changes but e.g. artifact changes, thresholds and delegations would be tested.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment