Skip to content

Commit

Permalink
Add tuf signing logic back
Browse files Browse the repository at this point in the history
Signed-off-by: github-actions <[email protected]>
  • Loading branch information
github-actions committed Aug 1, 2023
1 parent 353d5b9 commit 8eeb62a
Showing 1 changed file with 30 additions and 0 deletions.
30 changes: 30 additions & 0 deletions .github/workflows/tuf.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
name: Sign TUF metadata
on:
schedule:
# every 4 hours
- cron: '0 */4 * * *'
workflow_dispatch:
branches: [ main ]

jobs:
resign:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
with:
ref: tuf
- name: Setup signing keys
env:
SNAPSHOT_JSON: ${{ secrets.TUF_SNAPSHOT_JSON }}
TIMESTAMP_JSON: ${{ secrets.TUF_TIMESTAMP_JSON }}
run: |
mkdir keys
echo "$SNAPSHOT_JSON" > keys/snapshot.json
echo "$TIMESTAMP_JSON" > keys/timestamp.json
- name: Sign
env:
TUF_SNAPSHOT_PASSPHRASE: ${{ secrets.TUF_SNAPSHOT_PASSPHRASE}}
TUF_TIMESTAMP_PASSPHRASE: ${{ secrets.TUF_TIMESTAMP_PASSPHRASE}}
run: |
./refresh-metadata.sh

0 comments on commit 8eeb62a

Please sign in to comment.