-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update pull_request_template.md to include another test plan check #31
base: main
Are you sure you want to change the base?
Conversation
Add an additional test plan check to manually verify the RPM is properly signed (in addition to seeing that CI is successful)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I left a suggestion to make quicker to perform the check on pristine environments (e.g. a Qubes OS dispVM). Other than that, I think this is a very worthwhile check to add 👍
aeda422
to
938120f
Compare
Signed-off-by: Allie Crevier <[email protected]>
938120f
to
d854445
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
All good to me
> * Download the signed RPM from this PR | ||
> * Run `rpm qi <signed-rpm>` to get the KEY ID | ||
> * Run `gpg -k <KEY ID>` to verify that it matches the prod signing key (make sure you have the prod signing key referenced in the PR description in your GPG keyring) | ||
- [ ] The Unsigned RPM checksum matches what's in the build logs |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
TODO: I need to update this to include a note about checking the checksum on an OS that matches the OS in which it was built. @L3th3 - any recommended details you think I should add about this?
Add an additional test plan check to manually verify the RPM is properly signed (in addition to seeing that CI is successful).