1837455 - add a macos test task to verify proper signing/notarization/stapling

Status: NEW

(Release Engineering :: Release Automation, enhancement)

Description

[Julien Cristau [:jcristau]]

We recently broke stapling of firefox macos builds because we stopped including Contents/CodeResources in the notarization task's output artifact. We didn't catch that until it broke update-verify tasks in beta.
It would be nice if we could have a test task downstream of signing/notarization/stapling that checked that things can be verified properly.

Comment 1

[[e-mail] (:bhearsum)]

(In reply to Julien Cristau [:jcristau] from comment #0)

We recently broke stapling of firefox macos builds because we stopped including Contents/CodeResources in the notarization task's output artifact. We didn't catch that until it broke update-verify tasks in beta.
It would be nice if we could have a test task downstream of signing/notarization/stapling that checked that things can be verified properly.

I wonder if we could do this as part of the existing startup-test tasks? (At the very least, this kind would has a good starting point for how to get things running in the right place/at the right times...)