anchore
quill can send a dry run notarization request
What would you like to be added:
Quill should have a test / dry run type command that lets a user test their Apple ID creds by signing / notarizing a hello world in a single command.
Why is this needed:
Sometimes, when releasing a tool with quill, we have run into an issue where pushing a tag succeeds (and thus the Go library / package is effectively released), but later, notarizing the binaries fails. This is frustrating because, since tagging a Go release is immutable, we need to increment a artificially to retry the release.
Therefore, we would like a way to run an end to end test of the notorization flow on a dummy / throwaway artifact. We could add steps in CI everywhere quill is used to build and package a hello world and submit it for notarization, but that has the disadvantage of requiring more change everywhere. Instead, we'd like for quill to have some sort of test or dry run command that we can run as a pre-step in the release.
Additional context:
We are also running into e.g. FORBIDDEN.REQUIRED_AGREEMENTS_MISSING_OR_EXPIRED from time to time, such a test feature would be really helpful to us!
