54 lines (47 loc) · 1.62 KB
/
delegation-pop-verify.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
#
# Copyright 2023 The Sigstore Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
name: Verify POP for a delegation
on:
pull_request:
branches:
- 'ceremony/**'
- 'test-ceremony/**'
- 'test-delegation/**'
jobs:
verify:
if: ${{ startsWith(github.event.pull_request.title, 'feat/add-delegation for ') }}
runs-on: ubuntu-latest
permissions:
contents: 'write'
pull-requests: 'read'
env:
GITHUB_TOKEN: ${{ secrets.SIGSTORE_REVIEW_BOT_FINE_GRAINED_PAT }}
PR_NUMBER: ${{ github.event.pull_request.number }}
steps:
- name: Checkout
uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
with:
fetch-depth: 0
- name: Setup go
uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
with:
go-version-file: './go.mod'
check-latest: true
- name: Install deps
run: sudo apt-get install libpcsclite-dev
- name: build
run: make tuf
- name: Verify POP
run: .github/workflows/scripts/dpop-wrapper.sh "${{ github.event.pull_request.title }}"