Skip to content

signingscript: verify gpg signatures #1378

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jcristau merged 1 commit into from
Mar 4, 2026

signingscript: verify gpg signatures

7010c34
Select commit
Loading
Failed to load commit list.
Merged

signingscript: verify gpg signatures #1378

signingscript: verify gpg signatures
7010c34
Select commit
Loading
Failed to load commit list.
firefoxci-taskcluster / Decision Task succeeded Mar 4, 2026 in 28s

FirefoxCI (pull_request)

The task that creates all of the other tasks in the task graph

Details

View task in Taskcluster | View logs in Taskcluster | View task group in Taskcluster

Task Status

Started: 2026-03-04T19:10:58.102Z
Resolved: 2026-03-04T19:11:20.873Z
Task Execution Time: 22 seconds, 771 milliseconds
Task Status: completed
Reason Resolved: completed
TaskId: XLeeHIL2SgmsOdE7prxjPQ
RunId: 0

Artifacts

- public/actions.json
- public/chain-of-trust.json
- public/chain-of-trust.json.sig
- public/docker-contexts/addonscript.tar.gz
- public/docker-contexts/balrogscript.tar.gz
- public/docker-contexts/base.tar.gz
- public/docker-contexts/beetmoverscript.tar.gz
- public/docker-contexts/bitrisescript.tar.gz
- public/docker-contexts/bouncerscript.tar.gz
- public/docker-contexts/githubscript.tar.gz
- public/docker-contexts/landoscript.tar.gz
- public/docker-contexts/pushapkscript.tar.gz
- public/docker-contexts/pushapkscript-test-py311.tar.gz
- public/docker-contexts/pushapkscript-test-py313.tar.gz
- public/docker-contexts/pushflatpakscript.tar.gz
- public/docker-contexts/pushflatpakscript-test-py311.tar.gz
- public/docker-contexts/pushflatpakscript-test-py313.tar.gz
- public/docker-contexts/pushmsixscript.tar.gz
- public/docker-contexts/python311.tar.gz
- public/docker-contexts/python313.tar.gz
- public/docker-contexts/shipitscript.tar.gz
- public/docker-contexts/signingscript.tar.gz
- public/docker-contexts/signingscript-test-py311.tar.gz
- public/docker-contexts/signingscript-test-py313.tar.gz
- public/docker-contexts/skopeo.tar.gz
- public/docker-contexts/treescript.tar.gz
- public/fetch-content
- public/full-task-graph.json
- public/label-to-taskid.json
- public/logs/certified.log
- public/logs/live_backing.log
- public/logs/live.log
- public/optimizations.log
- public/parameters.yml
- public/runnable-jobs.json
- public/run-task
- public/target-tasks.json
- public/task-graph.json

[taskcluster 2026-03-04T19:10:58.179Z] Worker Type (scriptworker-1/decision) settings:
[taskcluster 2026-03-04T19:10:58.179Z]   {
[taskcluster 2026-03-04T19:10:58.179Z]     "config": {
[taskcluster 2026-03-04T19:10:58.179Z]       "deploymentId": ""
[taskcluster 2026-03-04T19:10:58.179Z]     },
[taskcluster 2026-03-04T19:10:58.179Z]     "generic-worker": {
[taskcluster 2026-03-04T19:10:58.179Z]       "config": {
[taskcluster 2026-03-04T19:10:58.179Z]         "headlessTasks": true
[taskcluster 2026-03-04T19:10:58.179Z]       },
[taskcluster 2026-03-04T19:10:58.179Z]       "engine": "multiuser",
[taskcluster 2026-03-04T19:10:58.179Z]       "go-arch": "amd64",
[taskcluster 2026-03-04T19:10:58.179Z]       "go-os": "linux",
[taskcluster 2026-03-04T19:10:58.179Z]       "go-version": "go1.25.5",
[taskcluster 2026-03-04T19:10:58.179Z]       "release": "https://github.com/taskcluster/taskcluster/releases/tag/v95.1.3",
[taskcluster 2026-03-04T19:10:58.179Z]       "revision": "300ac23a15bb11e577f3a3d116a570fde948337e",
[taskcluster 2026-03-04T19:10:58.179Z]       "source": "https://github.com/taskcluster/taskcluster/commits/300ac23a15bb11e577f3a3d116a570fde948337e",
[taskcluster 2026-03-04T19:10:58.179Z]       "version": "95.1.3"
[taskcluster 2026-03-04T19:10:58.179Z]     },
[taskcluster 2026-03-04T19:10:58.179Z]     "image": "projects/taskcluster-imaging/global/images/gw-fxci-gcp-l1-2404-amd64-headless-googlecompute-2026-01-14",
[taskcluster 2026-03-04T19:10:58.179Z]     "instance-id": "9108409393342659800",
[taskcluster 2026-03-04T19:10:58.179Z]     "instance-type": "projects/887720501152/machineTypes/n2-standard-2",
[taskcluster 2026-03-04T19:10:58.179Z]     "local-ipv4": "10.142.0.40",
[taskcluster 2026-03-04T19:10:58.179Z]     "project-id": "fxci-production-level1-workers",
[taskcluster 2026-03-04T19:10:58.179Z]     "public-hostname": "scriptworker-1-decision-goymdai6sssnda5hixyhww.c.fxci-production-level1-workers.internal",
[taskcluster 2026-03-04T19:10:58.179Z]     "public-ipv4": "34.26.9.35",
[taskcluster 2026-03-04T19:10:58.179Z]     "region": "us-east1",
[taskcluster 2026-03-04T19:10:58.179Z]     "zone": "us-east1-b"
[taskcluster 2026-03-04T19:10:58.179Z]   }
[taskcluster 2026-03-04T19:10:58.179Z] Task ID: XLeeHIL2SgmsOdE7prxjPQ
[taskcluster 2026-03-04T19:10:58.179Z] === Task Starting ===
[taskcluster 2026-03-04T19:10:58.918Z] [d2g] Loading docker image
[taskcluster 2026-03-04T19:10:59.014Z] [d2g] Loaded docker image "docker.io/mozillareleases/taskgraph:decision-v19.2.1@sha256:6cf28e0019ac35234e3ad4dc42586161fb77e6791fd593b8440a53f2f8aff8db"
[taskcluster 2026-03-04T19:10:59.031Z] Executing command 0: docker run -t --name taskcontainer_X6k8fDeFT023UOk_LYrtww --memory-swap -1 --pids-limit -1 '--add-host=localhost.localdomain:127.0.0.1' --add-host=taskcluster:host-gateway --env-file 'env.list' 'mozillareleases/taskgraph:decision-v19.2.1@sha256:6cf28e0019ac35234e3ad4dc42586161fb77e6791fd593b8440a53f2f8aff8db' run-task --scriptworker-checkout=/builds/worker/checkouts/src --task-cwd=/builds/worker/checkouts/src -- bash -cx 'ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='\''0'\'' --pushdate='\''0'\'' --project='\''scriptworker-scripts'\'' --message="" --owner='\''jcristau@users.noreply.github.com'\'' --level='\''1'\'' --base-repository="$SCRIPTWORKER_BASE_REPOSITORY" --head-repository="$SCRIPTWORKER_HEAD_REPOSITORY" --head-ref="$SCRIPTWORKER_HEAD_REF" --head-rev="$SCRIPTWORKER_HEAD_REV" --repository-type="$SCRIPTWORKER_REPOSITORY_TYPE" --tasks-for='\''github-pull-request'\'' 
[taskcluster 2026-03-04T19:10:59.031Z] '
[setup 2026-03-04T19:10:59.261+00:00] run-task started in /
[setup 2026-03-04T19:10:59.261+00:00] Invoked by command: --scriptworker-checkout=/builds/worker/checkouts/src --task-cwd=/builds/worker/checkouts/src -- bash -cx ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id='0' --pushdate='0' --project='scriptworker-scripts' --message="" --owner='jcristau@users.noreply.github.com' --level='1' --base-repository="$SCRIPTWORKER_BASE_REPOSITORY" --head-repository="$SCRIPTWORKER_HEAD_REPOSITORY" --head-ref="$SCRIPTWORKER_HEAD_REF" --head-rev="$SCRIPTWORKER_HEAD_REV" --repository-type="$SCRIPTWORKER_REPOSITORY_TYPE" --tasks-for='github-pull-request' 

[setup 2026-03-04T19:10:59.261+00:00] Python version: 3.11.2
[setup 2026-03-04T19:10:59.261+00:00] Subprocess python version: 
cpython-3.11.2-linux-x86_64-gnu    /usr/bin/python3.11
cpython-3.11.2-linux-x86_64-gnu    /usr/bin/python3 -> python3.11
[vcs 2026-03-04T19:10:59.358+00:00] WARNING: vcs checkout path (/builds/worker/checkouts/src) not in cache or volume; performance will likely suffer
[setup 2026-03-04T19:10:59.360+00:00] running as worker:worker
[vcs 2026-03-04T19:10:59.360+00:00] executing ['git', 'config', '--global', '--add', 'safe.directory', '/builds/worker/checkouts/src']
[vcs 2026-03-04T19:10:59.362+00:00] executing ['git', 'clone', 'https://github.com/mozilla-releng/scriptworker-scripts', '/builds/worker/checkouts/src']
[vcs 2026-03-04T19:10:59.363+00:00] Cloning into '/builds/worker/checkouts/src'...
[vcs 2026-03-04T19:11:04.636+00:00] executing ['git', 'fetch', 'https://github.com/jcristau/scriptworker-scripts', 'signingscript-verify-gpg']
[vcs 2026-03-04T19:11:04.841+00:00] From https://github.com/jcristau/scriptworker-scripts
[vcs 2026-03-04T19:11:04.841+00:00]  * branch              signingscript-verify-gpg -> FETCH_HEAD
[vcs 2026-03-04T19:11:04.844+00:00] executing ['git', 'checkout', '-f', '-B', 'signingscript-verify-gpg', '7010c34be80371a8e01f1e14335bb92c50235b1d']
[vcs 2026-03-04T19:11:05.931+00:00] Switched to a new branch 'signingscript-verify-gpg'
[vcs 2026-03-04T19:11:05.931+00:00] cleaning git checkout...
[vcs 2026-03-04T19:11:05.931+00:00] executing ['git', 'clean', '-nxdff']
[vcs 2026-03-04T19:11:05.941+00:00] removing []
[vcs 2026-03-04T19:11:05.941+00:00] successfully cleaned git checkout!
[vcs 2026-03-04T19:11:05.943+00:00] TinderboxPrint:<a href='https://github.com/jcristau/scriptworker-scripts/commit/7010c34be80371a8e01f1e14335bb92c50235b1d' title='Built from scriptworker-scripts commit 7010c34be80371a8e01f1e14335bb92c50235b1d'>7010c34be80371a8e01f1e14335bb92c50235b1d</a>
[task 2026-03-04T19:11:05.943+00:00] executing ['bash', '-cx', 'ln -s /builds/worker/artifacts artifacts && taskgraph decision --pushlog-id=\'0\' --pushdate=\'0\' --project=\'scriptworker-scripts\' --message="" --owner=\'jcristau@users.noreply.github.com\' --level=\'1\' --base-repository="$SCRIPTWORKER_BASE_REPOSITORY" --head-repository="$SCRIPTWORKER_HEAD_REPOSITORY" --head-ref="$SCRIPTWORKER_HEAD_REF" --head-rev="$SCRIPTWORKER_HEAD_REV" --repository-type="$SCRIPTWORKER_REPOSITORY_TYPE" --tasks-for=\'github-pull-request\' \n']
[task 2026-03-04T19:11:05.945+00:00] + ln -s /builds/worker/artifacts artifacts
[task 2026-03-04T19:11:05.946+00:00] + taskgraph decision --pushlog-id=0 --pushdate=0 --project=scriptworker-scripts --message= --owner=jcristau@users.noreply.github.com --level=1 --base-repository=https://github.com/mozilla-releng/scriptworker-scripts --head-repository=https://github.com/jcristau/scriptworker-scripts --head-ref=signingscript-verify-gpg --head-rev=7010c34be80371a8e01f1e14335bb92c50235b1d --repository-type=git --tasks-for=github-pull-request
[task 2026-03-04T19:11:06.523+00:00] 2026-03-04 19:11:06,523 - INFO - Loading graph configuration.
[task 2026-03-04T19:11:06.531+00:00] 2026-03-04 19:11:06,531 - WARNING - using default project parameters; add scriptworker-scripts to PER_PROJECT_PARAMETERS in /usr/local/lib/python3.11/dist-packages/taskgraph/decision.py to customize behavior for this project
[task 2026-03-04T19:11:06.532+00:00] 2026-03-04 19:11:06,531 - INFO - Using Parameters(id=5b65ebb22d22) (from defaults)
[task 2026-03-04T19:11:06.532+00:00] 2026-03-04 19:11:06,531 - INFO - writing artifact file `parameters.yml`
[task 2026-03-04T19:11:06.541+00:00] 2026-03-04 19:11:06,541 - INFO - writing artifact file `actions.json`
[task 2026-03-04T19:11:06.542+00:00] 2026-03-04 19:11:06,541 - INFO - Loading kinds
[task 2026-03-04T19:11:06.544+00:00] 2026-03-04 19:11:06,544 - INFO - Generating full task set
[task 2026-03-04T19:11:06.559+00:00] 2026-03-04 19:11:06,558 - INFO - Writing docker-contexts/python311.tar.gz for docker image python311
[task 2026-03-04T19:11:06.577+00:00] 2026-03-04 19:11:06,577 - INFO - Writing docker-contexts/python313.tar.gz for docker image python313
[task 2026-03-04T19:11:06.595+00:00] 2026-03-04 19:11:06,594 - INFO - Writing docker-contexts/skopeo.tar.gz for docker image skopeo
[task 2026-03-04T19:11:06.613+00:00] 2026-03-04 19:11:06,613 - INFO - Writing docker-contexts/base.tar.gz for docker image base
[task 2026-03-04T19:11:06.655+00:00] 2026-03-04 19:11:06,654 - INFO - Writing docker-contexts/addonscript.tar.gz for docker image addonscript
[task 2026-03-04T19:11:06.661+00:00] 2026-03-04 19:11:06,661 - INFO - Writing docker-contexts/balrogscript.tar.gz for docker image balrogscript
[task 2026-03-04T19:11:06.675+00:00] 2026-03-04 19:11:06,675 - INFO - Writing docker-contexts/bitrisescript.tar.gz for docker image bitrisescript
[task 2026-03-04T19:11:06.682+00:00] 2026-03-04 19:11:06,682 - INFO - Writing docker-contexts/beetmoverscript.tar.gz for docker image beetmoverscript
[task 2026-03-04T19:11:06.714+00:00] 2026-03-04 19:11:06,714 - INFO - Writing docker-contexts/bouncerscript.tar.gz for docker image bouncerscript
[task 2026-03-04T19:11:06.729+00:00] 2026-03-04 19:11:06,729 - INFO - Writing docker-contexts/githubscript.tar.gz for docker image githubscript
[task 2026-03-04T19:11:06.736+00:00] 2026-03-04 19:11:06,736 - INFO - Writing docker-contexts/landoscript.tar.gz for docker image landoscript
[task 2026-03-04T19:11:06.757+00:00] 2026-03-04 19:11:06,757 - INFO - Writing docker-contexts/shipitscript.tar.gz for docker image shipitscript
[task 2026-03-04T19:11:06.770+00:00] 2026-03-04 19:11:06,770 - INFO - Writing docker-contexts/pushapkscript.tar.gz for docker image pushapkscript
[task 2026-03-04T19:11:10.711+00:00] 2026-03-04 19:11:10,711 - INFO - Writing docker-contexts/pushflatpakscript.tar.gz for docker image pushflatpakscript
[task 2026-03-04T19:11:10.772+00:00] 2026-03-04 19:11:10,772 - INFO - Writing docker-contexts/pushmsixscript.tar.gz for docker image pushmsixscript
[task 2026-03-04T19:11:10.782+00:00] 2026-03-04 19:11:10,782 - INFO - Writing docker-contexts/signingscript.tar.gz for docker image signingscript
[task 2026-03-04T19:11:13.194+00:00] 2026-03-04 19:11:13,194 - INFO - Writing docker-contexts/treescript.tar.gz for docker image treescript
[task 2026-03-04T19:11:13.218+00:00] 2026-03-04 19:11:13,218 - INFO - Writing docker-contexts/pushapkscript-test-py311.tar.gz for docker image pushapkscript-test-py311
[task 2026-03-04T19:11:13.235+00:00] 2026-03-04 19:11:13,235 - INFO - Writing docker-contexts/pushflatpakscript-test-py311.tar.gz for docker image pushflatpakscript-test-py311
[task 2026-03-04T19:11:13.251+00:00] 2026-03-04 19:11:13,251 - INFO - Writing docker-contexts/signingscript-test-py311.tar.gz for docker image signingscript-test-py311
[task 2026-03-04T19:11:13.268+00:00] 2026-03-04 19:11:13,268 - INFO - Writing docker-contexts/pushapkscript-test-py313.tar.gz for docker image pushapkscript-test-py313
[task 2026-03-04T19:11:13.285+00:00] 2026-03-04 19:11:13,285 - INFO - Writing docker-contexts/pushflatpakscript-test-py313.tar.gz for docker image pushflatpakscript-test-py313
[task 2026-03-04T19:11:13.302+00:00] 2026-03-04 19:11:13,301 - INFO - Writing docker-contexts/signingscript-test-py313.tar.gz for docker image signingscript-test-py313
[task 2026-03-04T19:11:13.320+00:00] 2026-03-04 19:11:13,320 - INFO - Generated 23 tasks for kind docker-image
[task 2026-03-04T19:11:13.347+00:00] 2026-03-04 19:11:13,347 - INFO - Generated 3 tasks for kind check
[task 2026-03-04T19:11:13.355+00:00] 2026-03-04 19:11:13,355 - INFO - Generated 13 tasks for kind push-image
[task 2026-03-04T19:11:13.933+00:00] 2026-03-04 19:11:13,933 - INFO - Generated 34 tasks for kind tox
[task 2026-03-04T19:11:13.937+00:00] 2026-03-04 19:11:13,937 - INFO - Generated 1 tasks for kind pr
[task 2026-03-04T19:11:13.941+00:00] 2026-03-04 19:11:13,941 - INFO - Generating full task graph
[task 2026-03-04T19:11:13.941+00:00] 2026-03-04 19:11:13,941 - INFO - Full task graph contains 74 tasks and 76 dependencies
[task 2026-03-04T19:11:13.943+00:00] 2026-03-04 19:11:13,943 - INFO - writing artifact file `full-task-graph.json`
[task 2026-03-04T19:11:13.945+00:00] 2026-03-04 19:11:13,944 - INFO - writing artifact file `runnable-jobs.json`
[task 2026-03-04T19:11:13.945+00:00] 2026-03-04 19:11:13,945 - INFO - Generating target task set
[task 2026-03-04T19:11:13.946+00:00] 2026-03-04 19:11:13,945 - INFO - Filter filter_target_tasks pruned 36 tasks (38 remain)
[task 2026-03-04T19:11:13.946+00:00] 2026-03-04 19:11:13,946 - INFO - writing artifact file `target-tasks.json`
[task 2026-03-04T19:11:13.946+00:00] 2026-03-04 19:11:13,946 - INFO - Generating target task graph
[task 2026-03-04T19:11:13.946+00:00] 2026-03-04 19:11:13,946 - INFO - Adding 23 tasks with `always_target` attribute
[task 2026-03-04T19:11:13.946+00:00] 2026-03-04 19:11:13,946 - INFO - Generating optimized task graph
[task 2026-03-04T19:11:13.948+00:00] 2026-03-04 19:11:13,948 - INFO - No tasks removed during optimization
[task 2026-03-04T19:11:14.421+00:00] 2026-03-04 19:11:14,421 - INFO - Replaced 57 tasks by index-search (index-search) during optimization.
[task 2026-03-04T19:11:14.421+00:00] 2026-03-04 19:11:14,421 - INFO - writing artifact file `task-graph.json`
[task 2026-03-04T19:11:14.422+00:00] 2026-03-04 19:11:14,422 - INFO - writing artifact file `label-to-taskid.json`
[task 2026-03-04T19:11:14.424+00:00] 2026-03-04 19:11:14,424 - INFO - Creating task with taskId Y2BPy0g-QJaXZY8qCExXgA for check-yamllint
[task 2026-03-04T19:11:14.426+00:00] 2026-03-04 19:11:14,424 - INFO - Creating task with taskId Jy8UW9mfS4qd_vwjWKsSYg for check-ruff-format
[task 2026-03-04T19:11:14.427+00:00] 2026-03-04 19:11:14,425 - INFO - Creating task with taskId Jz3WeahhTwqwa1_m-woAGQ for check-ruff-lint
[task 2026-03-04T19:11:14.601+00:00] 2026-03-04 19:11:14,601 - INFO - Creating task with taskId f7Gd4LvoTDCYBHn1pK9T4A for pr-complete
[taskcluster 2026-03-04T19:11:15.756Z]                        Exit Code: 0
[taskcluster 2026-03-04T19:11:15.756Z]                        User Time: 8.426ms
[taskcluster 2026-03-04T19:11:15.756Z]                      Kernel Time: 20.465ms
[taskcluster 2026-03-04T19:11:15.756Z]                        Wall Time: 16.724248553s
[taskcluster 2026-03-04T19:11:15.756Z]  Average Available System Memory: 7.10 GiB
[taskcluster 2026-03-04T19:11:15.756Z]       Average System Memory Used: 668.01 MiB
[taskcluster 2026-03-04T19:11:15.756Z]          Peak System Memory Used: 726.52 MiB
[taskcluster 2026-03-04T19:11:15.756Z]              Total System Memory: 7.75 GiB
[taskcluster 2026-03-04T19:11:15.756Z]                           Result: SUCCEEDED
[taskcluster 2026-03-04T19:11:15.756Z] === Task Finished ===
[taskcluster 2026-03-04T19:11:15.756Z] Task Duration: 16.7247083s
View more details on firefoxci-taskcluster