keyring: verify runc.keyring has legitimate maintainer keys

These checks ensure that all of the keys in the runc.keyring list are actually the keys of the specified user and that the users themselves are actually maintainers. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
2026-07-11 06:03:57 +08:00 · 2023-04-19 12:29:21 +10:00
parent 957bccfe2f
commit 22538f896a
3 changed files with 108 additions and 1 deletions
@@ -13,6 +13,12 @@ permissions:
  contents: read

 jobs:
+  keyring:
+    runs-on: ubuntu-22.04
+    steps:
+    - uses: actions/checkout@v3
+    - name: check runc.keyring
+      run: make validate-keyring

  lint:
    permissions: