cosign
cosign copied to clipboard
Review unit and integration tests
trafficstars
Some things we could do here to make sure we have good test coverage:
- [ ] Make sure unit tests are thorough
- [ ] Reorganize integration tests (they're mostly in one big e2e_test.go file right now)
- [ ] Make sure integration tests are thorough, ideally covering experimental features well & an OIDC flow (this might have already happened)
- [ ] add a test for the second case in GHSA-ccxc-vr6p-4858 once the OIDC flow is in place.
We should add a test for the second case in GHSA-ccxc-vr6p-4858 once the OIDC flow is in place.
See also: https://github.com/sigstore/fulcio/issues/368
Can I tag you in, @wlynch? This seems related to some of the other Sigstore work you're doing right now and I haven't been able to find much time to devote here.