root-signing
root-signing copied to clipboard
[delegations] Create a reusable workflow that can create a delegations metadata file and sign
Description
Consume this workflow in an external repository.
Ensure that this workflow can
- Checkout a configured repository & branch (root-signing and the ceremony branch)
- Create the metadata file (or update)
- Sign with a key
- Create a PR with the updated the delegation file against the configured repository & branch
cc @kommendorkapten
Closed, because will be handled by the delegation
this should be decently handled by tuf-on-ci-delegate (to create the delegation) and theupdateframework/tuf-on-ci/actions/online-sign-targets action for signing in delegated metadata in a workflow