A command to manage Trusted uploaders (PACMAN-1156)

[trombik]

Related area

components

Is your feature request related to a problem?

As I understand it, when you upload a component with upload-components-ci-action, you need to specify and allow Trusted uploaders in each component. Currently, the only method provided is, setting via the Web interface. That is a bit of works for us. As we use two different GitHub Actions workflows, one for validation and another for upload, that means I have to set Trusted uploaders nearly 200 times for our nearly a hundred of components.

Describe the solution you'd like

It would be nice to have a sub-command to modify Trusted uploaders of a component so that I can loop it over in a script.

Describe alternatives you've considered

Manually configure each component via the Web UI.

Additional context

I'm migrating a monolithic repository to many single-component repository at esp-idf-lib. The repository has nearly a hundred of components.

I have checked existing list of Feature requests and I have provided enough information.

• I confirm I have checked existing list of Feature requests and I have provided enough information.

[trombik]

I've just re-read the documentation of the action. Token-based authentication was rejected because I, incorrectly, thought it required a specific person to manage it.

If any api_token issued by anyone with admin role of a component can be used for authentication from GitHub Actions, that would be a solution.

[kumekay]

@trombik We are not planning to expose an API or CLI for Trusted Uploaders, but we are planning to add a way to create a Trusted Uploader at namespace level