mozilla-services / addon-shipping Goto Github PK
View Code? Open in Web Editor NEWOutdated repo; see
Home Page: https://github.com/mozilla-services/sign-xpi
License: Mozilla Public License 2.0
Outdated repo; see
Home Page: https://github.com/mozilla-services/sign-xpi
License: Mozilla Public License 2.0
The current system addon process is too big and not strictly defined enough to fully automate it. Reasons:
Instead I propose we focus on improving a small part: XPI signing. The current process is for somebody from ops with SSH access to take the XPI, sign it on the right box, and attach it to the tracking bug.
Proposed state machine: (changelog below)
This is good because:
What we're intentionally not doing:
release-sysaddon
changelog (most recent first)
Create a reusable lambda function that can take an XPI and pass it off to the Autograph service to be signed.
We want to create this as a lambda function so it can be reusable in other state machines. We should consider this to be a "high security" component since it needs to hold Hawk credentials for talking with Autograph.
Input:
Output:
Algorithm:
Any failures should:
Ref: #2 (comment)
When a new commit merges into master it should be auto built / tested and deployed to the development IAM by CircleCI.
As of January 1 2019, Mozilla requires that all GitHub projects include this CODE_OF_CONDUCT.md file in the project root. The file has two parts:
If you have any questions about this file, or Code of Conduct policies and procedures, please reach out to [email protected].
(Message COC001)
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.