tuf.yml

name: Refresh timestamp metadata
on:
  schedule:
    # every 8 hours
    - cron: '0 */8 * * *'
  workflow_dispatch:
    inputs:
      branches:
        description: The branch to run on
        required: false
        default: 'main'
        type: string

jobs:
  resign:
    if: github.repository == 'foundriesio/fioctl'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          ref: tuf-metadata
      - name: Setup signing key
        env:
          TIMESTAMP_JSON: ${{ secrets.TUF_TIMESTAMP_JSON }}
        run: |
          mkdir keys
          echo "$TIMESTAMP_JSON" > keys/timestamp.json
      - name: Sign
        env:
          TUF_TIMESTAMP_PASSPHRASE: ${{ secrets.TUF_TIMESTAMP_PASSPHRASE}}
        run: |
          ./refresh-metadata.sh