in-toto / in-toto / 470 / 1

99%

develop: 100%

push

travis-ci

Update in-toto-sign interface

Following a discussion with @awwad (see gist at
in-toto/in-toto#125) about individual Link metadata files
generally not being signed with more than one key, but rather
having multiple Link metadata files each signed with a single
different key, to fulfill threshold requirements, this commit
makes the following changes:

- Allow only one signing key for Links
- Make "replace signatures" default for Links and Layouts
- Instead of `--replace` provide the option `--append`
  (available for Layouts only, which can have more than
  one signatures)
- Remove `--infix` option and make it default behavior for Links
 (in-toto verification expects links to have a keyid as infix)

382 of 402 branches covered (95.02%)

2755 of 2773 relevant lines covered (99.35%)

0.99 hits per line