Update staging-root.json and test assets#602
Conversation
Change hardcoded root to the new root from sigstore/root-signing#756 Signed-off-by: Hayden B <[email protected]>
Signed-off-by: Andrew Pan <[email protected]>
These tests need to be updated for our new trusted root format. Testing for that is landing in sigstore#591. Signed-off-by: Andrew Pan <[email protected]>
Signed-off-by: Andrew Pan <[email protected]>
Signed-off-by: Andrew Pan <[email protected]>
woodruffw
left a comment
There was a problem hiding this comment.
LGTM, one chaff file needs to be removed.
test/unit/internal/test_tuf.py
Outdated
| ) # Valid: 1 ago, 1 ago | ||
|
|
||
|
|
||
| @pytest.mark.skip |
There was a problem hiding this comment.
This ends up exercising the TUF codepath, which doesn't return PEM keys. It's a little tricky to handle, I have helpers to make this easier to handle in #591. If we want to port stuff over from there, I can do so, although I thought it might be easier to just fix these tests in that changeset
There was a problem hiding this comment.
Oh hm I guess another option is to stub out _get_trusted_root to force the legacy non-bundled root
There was a problem hiding this comment.
Oh hm I guess another option is to stub out
_get_trusted_rootto force the legacy non-bundled root
Yeah, let's do that (and document that that's what we're doing, for future software archaeologists).
Signed-off-by: Andrew Pan <[email protected]>
Signed-off-by: Andrew Pan <[email protected]>
Signed-off-by: Andrew Pan <[email protected]>
Signed-off-by: Andrew Pan <[email protected]>
* Update staging-root.json Change hardcoded root to the new root from sigstore/root-signing#756 Signed-off-by: Hayden B <[email protected]> * wip: test: adjust local assets for staging update Signed-off-by: Andrew Pan <[email protected]> * test_tuf: skip failing getter tests These tests need to be updated for our new trusted root format. Testing for that is landing in sigstore#591. Signed-off-by: Andrew Pan <[email protected]> * fixup! test_tuf: skip failing getter tests Signed-off-by: Andrew Pan <[email protected]> * fixup! fixup! test_tuf: skip failing getter tests Signed-off-by: Andrew Pan <[email protected]> * fixup! fixup! fixup! test_tuf: skip failing getter tests Signed-off-by: Andrew Pan <[email protected]> * fixup! fixup! fixup! fixup! test_tuf: skip failing getter tests Signed-off-by: Andrew Pan <[email protected]> * test_tuf: doc Signed-off-by: Andrew Pan <[email protected]> * test: add staging-tuf targets Signed-off-by: Andrew Pan <[email protected]> --------- Signed-off-by: Hayden B <[email protected]> Signed-off-by: Andrew Pan <[email protected]> Co-authored-by: Hayden B <[email protected]> Signed-off-by: Emile Baez <[email protected]>
See #594.