Merge pull request #1323 from sigstore/sign/migration

Signing event: sign/migration
sigstore · Aug 30, 2024 · 67d0366 · 67d0366
2 parents 8a968c0 + 624bc82
commit 67d0366
Show file tree

Hide file tree

Showing 27 changed files with 264 additions and 1,731 deletions.
diff --git a/.github/workflows/cosign-test.yml b/.github/workflows/cosign-test.yml
diff --git a/.github/workflows/create-signing-events.yml b/.github/workflows/create-signing-events.yml
@@ -1,9 +1,8 @@
 name: TUF-on-CI create Signing events
 
 on:
-  # disabled during migration
-  #schedule:
-  #  - cron:  '17 1,7,13,19 * * *'
+  schedule:
+    - cron: '17 1,7,13,19 * * *'
   workflow_dispatch:
 
 permissions: {}

diff --git a/.github/workflows/delegation-pop-verify.yml b/.github/workflows/delegation-pop-verify.yml
diff --git a/.github/workflows/initialize.yml b/.github/workflows/initialize.yml
diff --git a/.github/workflows/ci-test.yml → .github/workflows/lint.yml b/.github/workflows/ci-test.yml → .github/workflows/lint.yml
@@ -13,31 +13,13 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-name: CI Test
+name: Lint
 
 on:
   push:
-    paths-ignore:
-      - 'ceremony/**'
   pull_request:
-    paths-ignore:
-      - 'ceremony/**'
 
 jobs:
-  golangci:
-    name: lint
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
-        with:
-          go-version-file: './go.mod'
-          check-latest: true
-      - name: golangci-lint
-        uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v6.1.0
-        with:
-          version: v1.59
-
   yamllint:
     runs-on: ubuntu-latest
     steps:
@@ -65,40 +47,6 @@ jobs:
         with:
           actionlint_flags: -color -shellcheck=
 
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
-        with:
-          go-version-file: './go.mod'
-          check-latest: true
-      - name: install deps
-        run: |
-          sudo apt-get install libpcsclite-dev
-      - name: Test
-        run: go test -tags=pivkey -v ./...
-      - name: Ensure no files were modified as a result of the build
-        run: git update-index --refresh && git diff-index --quiet HEAD -- || git diff --exit-code
-
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
-        with:
-          go-version-file: './go.mod'
-          check-latest: true
-      - name: install deps
-        run: |
-          sudo apt-get install libpcsclite-dev
-      - name: build verification
-        run: go build -o verify ./cmd/verify/
-      - name: build TUF script
-        run: go build -o tuf -tags=pivkey ./cmd/tuf
-      - name: build test script
-        run: go build -o keygen -tags=pivkey ./tests/keygen
-
   shellcheck:
     name: Shellcheck
     runs-on: ubuntu-latest

diff --git a/.github/workflows/online-sign.yml b/.github/workflows/online-sign.yml
@@ -3,12 +3,11 @@ name: TUF-on-CI online signing
 permissions: {}
 
 on:
-  # disabled during migration
-  #schedule:
-  #  - cron:  '17 1,7,13,19 * * *'
-  #push:
-  #  branches: [ main ]
-  #  paths: ['metadata/**', '!metadata/timestamp.json', '!metadata/snapshot.json']
+  schedule:
+    - cron: '17 1,7,13,19 * * *'
+  push:
+    branches: [main]
+    paths: ['metadata/**', '!metadata/timestamp.json', '!metadata/snapshot.json']
   workflow_dispatch:
 
 jobs: