forked from foundriesio/fioctl
-
Notifications
You must be signed in to change notification settings - Fork 0
30 lines (29 loc) · 810 Bytes
/
tuf.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
name: Sign TUF metadata
on:
schedule:
# every 4 hours
- cron: '0 */4 * * *'
workflow_dispatch:
branches: [ main ]
jobs:
resign:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
with:
ref: tuf
- name: Setup signing keys
env:
SNAPSHOT_JSON: ${{ secrets.TUF_SNAPSHOT_JSON }}
TIMESTAMP_JSON: ${{ secrets.TUF_TIMESTAMP_JSON }}
run: |
mkdir keys
echo "$SNAPSHOT_JSON" > keys/snapshot.json
echo "$TIMESTAMP_JSON" > keys/timestamp.json
- name: Sign
env:
TUF_SNAPSHOT_PASSPHRASE: ${{ secrets.TUF_SNAPSHOT_PASSPHRASE}}
TUF_TIMESTAMP_PASSPHRASE: ${{ secrets.TUF_TIMESTAMP_PASSPHRASE}}
run: |
./refresh-metadata.sh