drop target check to a 7 day window before paging (#207)

Signed-off-by: Bob Callaway <bcallaway@google.com>
sigstore · Mar 25, 2024 · 3b28b42 · 3b28b42
1 parent c175c25
commit 3b28b42
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/.github/workflows/reusable-prober.yml b/.github/workflows/reusable-prober.yml
@@ -161,9 +161,9 @@ jobs:
           verify repository --repository ${{ inputs.tuf_repo }} --root ${ROOT_PATH} --valid-until ${EXPIRY} --dedup-key-file ${PD_DEDUP_KEY_FILE} || (echo "dedup_key=$(cat ${PD_DEDUP_KEY_FILE})" >> $GITHUB_OUTPUT ; exit 1)
           echo "::endgroup::"
 
-          echo "::group::tuf-repo-cdn 15 day check"
-          export EXPIRY=$(date -d '+15 days' '+%s')
-          echo "Verifying root valid within 15 days..."
+          echo "::group::tuf-repo-cdn 7 day check"
+          export EXPIRY=$(date -d '+7 days' '+%s')
+          echo "Verifying root valid within 7 days..."
           verify repository --repository ${{ inputs.tuf_repo }} --root ${ROOT_PATH} --valid-until ${EXPIRY} --role root.json --role targets.json --dedup-key-file ${PD_DEDUP_KEY_FILE} || (echo "dedup_key=$(cat ${PD_DEDUP_KEY_FILE})" >> $GITHUB_OUTPUT ; exit 1)
           echo "::endgroup::"
 
@@ -173,9 +173,9 @@ jobs:
           verify repository --repository ${{ inputs.tuf_preprod_repo }} --root ${ROOT_PATH} --valid-until ${EXPIRY} --dedup-key-file ${PD_DEDUP_KEY_FILE} || (echo "dedup_key=$(cat ${PD_DEDUP_KEY_FILE})" >> $GITHUB_OUTPUT ; exit 1)
           echo "::endgroup::"
 
-          echo "::group::tuf-preprod-repo-cdn 15 day check"
-          export EXPIRY=$(date -d '+15 days' '+%s')
-          echo "Verifying root valid within 15 days..."
+          echo "::group::tuf-preprod-repo-cdn 7 day check"
+          export EXPIRY=$(date -d '+7 days' '+%s')
+          echo "Verifying root valid within 7 days..."
           verify repository --repository ${{ inputs.tuf_preprod_repo }} --root ${ROOT_PATH} --valid-until ${EXPIRY} --role root.json --role targets.json --dedup-key-file ${PD_DEDUP_KEY_FILE} || (echo "dedup_key=$(cat ${PD_DEDUP_KEY_FILE})" >> $GITHUB_OUTPUT ; exit 1)
           echo "::endgroup::"