Skip to content

New-CI: Implement Verify Signing Stage #1437

Description

@andrew-m-leonard

Title: Create signature verification stage

Description:
Implement the Verify Signing stage that validates all signatures are correct and complete.

Tasks:

  • Create 11-verify-signing.sh script
    • Read signed artifacts from INPUT_ARTIFACTS_DIR
    • Verify artifact signatures
    • Verify installer signatures
    • Verify GPG signatures
    • Write verification report to TARGET_DIR
  • Add stage to Jenkinsfile.declarative
    • Define stage with proper prerequisites
    • Set INPUT_ARTIFACTS_DIR and TARGET_DIR
    • Add artifact archiving
  • Add stage to run-pipeline.py
    • Implement stage_verify_signing() method
    • Set environment variables
    • Handle workspace cleanup
  • Test stage locally
  • Test stage in Jenkins
  • Document stage behavior

Acceptance Criteria:

  • Script works in both Jenkins and local
  • All signature types verified
  • Verification report generated
  • Stage is restartable
  • Documentation complete
  • [ ]

Metadata

Metadata

Labels

enhancementgenerationIssues that provide enhancements or fixes to the job generatorsinstallerIssues that relate to our installer jobs or installer repo

Type

No type

Projects

Status
Todo

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions