Merge pull request #1449 from jku/stricter-validity-check

tests: Require metadata to be valid for 5 days
sigstore · Feb 6, 2025 · a1afc69 · a1afc69
2 parents ca6d0de + 0908928
commit a1afc69
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/test-gcs.yml b/.github/workflows/test-gcs.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           metadata_url: https://tuf-repo-cdn.sigstore.dev/
           # when workflow is reused in publish.yml, do not require future validity
-          valid_days: ${{ github.workflow == 'root-signing GCS repository tests' && 3 || 0 }}
+          valid_days: ${{ github.workflow == 'root-signing GCS repository tests' && 5 || 0 }}
           offline_valid_days: ${{ github.workflow == 'root-signing GCS repository tests' && 30 || 0 }}
 
   custom-smoke-test:

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -25,7 +25,7 @@ jobs:
           metadata_url: https://sigstore.github.io/root-signing/
           update_base_url: https://tuf-repo-cdn.sigstore.dev/
           # when workflow is reused in publish.yml, do not require future validity
-          valid_days: ${{ github.workflow == 'TUF-on-CI repository tests' && 3 || 0 }}
+          valid_days: ${{ github.workflow == 'TUF-on-CI repository tests' && 5 || 0 }}
           offline_valid_days: ${{ github.workflow == 'TUF-on-CI repository tests' && 30 || 0 }}
 
   custom-smoke-test: