asraa
asraa
At least for now we can try with the manual merge + use the noreply!
SG! No rush, just for tracking :)
This can be done in a staging branch!
If we use a staging branch, we get to test our workflows for free. Work needs to be done to (1) ensure that the keys are substituted for test HSM...
In the short term: * Set up a key and use the script to add a delegation file In the long term: * Try to set up the staging branch....
@kommendorkapten if there's already an existing target staged for the npm signing key, could you reference it here? we can then add it to staging. if not, no worries
cc @haydentherapper
This is essentially the staging folder now. The remaining items here are the automated workflows - since all the keys are in the repository, we only need one workflow to...
cc @haydentherapper @bobcallaway @dlorenc @joshuagl do any of you have good ideas?
> Do you have a sketch of what this might look like? I'm not sure I understand the idea enough to comment. I'll spec it out!