Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Signing event: sign/migration #1323

Merged
merged 20 commits into from
Aug 30, 2024
Merged

Signing event: sign/migration #1323

merged 20 commits into from
Aug 30, 2024

Commits on Aug 21, 2024

  1. Repo import by @jku

    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    jku committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    74805e7 View commit details
    Browse the repository at this point in the history
  2. 'timestamp' role/delegation change

    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    jku committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    e7de4ec View commit details
    Browse the repository at this point in the history
  3. Enable tuf-on-ci workflows

    Note that deployment to GCS is still commented out in publish workflow.
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    jku committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    b403355 View commit details
    Browse the repository at this point in the history
  4. workflows: Remove legacy workflows

    Delete legacy (meaning non- tuf-on-ci)
     * timestamp and snapshot workflows
     * GCS uploading workflows
     * signing event management workflows (dealing with "ceremony/" dirs)
     * various verification workflows: now handled by the
       tuf-on-ci tests and custom-test.yml
    
    Remove these outright to prevent accidental changes to metadata from two
    different maintenance systems.
    
    If it turns out the migration will not be successful in the timeframe it
    has, the PR that contains this commit needs to be reverted so the legacy
    system can continue operation.
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    jku committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    37904f3 View commit details
    Browse the repository at this point in the history

Commits on Aug 26, 2024

  1. 'registry.npmjs.org' role/delegation change

    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    kommendorkapten committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    89cbea9 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #1327 from kommendorkapten/sign/migration

    'registry.npmjs.org' role/delegation change
    jku committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    6697742 View commit details
    Browse the repository at this point in the history
  3. Signature over npm delegation.

    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    kommendorkapten committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    7dc3f08 View commit details
    Browse the repository at this point in the history
  4. Remove empty signature from previous key id

    Signed-off-by: Fredrik Skogman <kommendorkapten@github.com>
    kommendorkapten committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    c1d3ef3 View commit details
    Browse the repository at this point in the history
  5. Merge pull request #1331 from kommendorkapten/npm-sig

    Signature over npm delegation.
    jku committed Aug 26, 2024
    Configuration menu
    Copy the full SHA
    773340f View commit details
    Browse the repository at this point in the history

Commits on Aug 27, 2024

  1. Signature from @joshuagl

    Signed-off-by: Joshua Lock <joshuagloe@gmail.com>
    joshuagl committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    c9ec578 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #1332 from joshuagl/sign/migration

    Signature from @joshuagl
    jku committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    c1327c1 View commit details
    Browse the repository at this point in the history
  3. Signature from @bobcallaway

    Signed-off-by: Bob Callaway <bcallaway@google.com>
    bobcallaway committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    0eb1447 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    a3b0256 View commit details
    Browse the repository at this point in the history
  5. Signature from @dlorenc

    Signed-off-by: Dan Lorenc <dlorenc@chainguard.dev>
    dlorenc committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    7038bd2 View commit details
    Browse the repository at this point in the history
  6. Merge pull request #1334 from dlorenc/sign/migration

    Signature from @dlorenc
    jku committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    1b65f7d View commit details
    Browse the repository at this point in the history
  7. Signature from @mnm678

    Signed-off-by: Marina Moore <mnm678@gmail.com>
    mnm678 committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    3c4f9c6 View commit details
    Browse the repository at this point in the history
  8. Merge pull request #1335 from mnm678/sign/migration

    Signature from @mnm678
    jku committed Aug 27, 2024
    Configuration menu
    Copy the full SHA
    51df10d View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2024

  1. Signature from @SantiagoTorres

    Signed-off-by: Santiago Torres-Arias <santiagotorres@purdue.edu>
    SantiagoTorres committed Aug 28, 2024
    Configuration menu
    Copy the full SHA
    2fafe33 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    e0cf2f5 View commit details
    Browse the repository at this point in the history

Commits on Aug 30, 2024

  1. Merge remote-tracking branch 'jku/enable-tuf-on-ci' into sign/migration

    Merge the branch that
    * disables legacy workflows
    * enables tuf-on-ci workflows (apart from final GCS prod publish)
    into the migration signing event branch
    
    This should ensure that once we merge the signing event, all the correct
    workflows will run, and old ones will not.
    jku committed Aug 30, 2024
    Configuration menu
    Copy the full SHA
    624bc82 View commit details
    Browse the repository at this point in the history