Open Bug 2069360 Opened 8 days ago

Sign install-firefox.sh with autograph GPG

Categories

(Release Engineering :: Release Automation, enhancement)

Product:
Release Engineering
Component:
Release Automation
Type:
enhancement

Tracking

(Not tracked)

People

(Reporter: jlorenzo, Unassigned)

References

(Depends on 3 open bugs, Blocks 1 open bug)

Details

Add an install-script-signing taskgraph kind that signs install-firefox.sh with the gcp_prod_autograph_gpg format, producing a detached install-firefox.sh.asc. Uses the existing dep/nightly signing certs, no new signing infra needed.

You need to log in before you can comment on or make changes to this bug.