Make it easier to run verification test locally

For sigstore#99 If you're only testing verification use-cases locally, you don't need the OIDC JWT. Signed-off-by: Zach Steindler <[email protected]>
steiza · Sep 20, 2023 · 5c45120 · 5c45120
1 parent 6c958ac
commit 5c45120
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -62,7 +62,13 @@ invoke the client.
 Running the conformance suite locally,
 
 ```sh
-(env) $ pytest --entrypoint=SIGSTORE_CLIENT --identity-token=$(gh auth token)
+(env) $ pytest test --entrypoint=SIGSTORE_CLIENT --identity-token=$(gh auth token)
+```
+
+Or if you are only checking verification use cases,
+
+```sh
+(env) $ pytest test --skip-signing --entrypoint=SIGSTORE_CLIENT
 ```
 
 Using the [`gh` CLI](https://cli.github.com/) and noting SIGSTORE_CLIENT is the absolute path to a client implementing the [CLI specification](https://github.com/sigstore/sigstore-conformance/blob/main/docs/cli_protocol.md).

diff --git a/test/conftest.py b/test/conftest.py
@@ -52,7 +52,6 @@ def pytest_addoption(parser) -> None:
         "--github-token",
         action="store",
         help="the GitHub token to supply to the Sigstore client under test",
-        required=True,
         type=str,
     )
     parser.addoption(
@@ -73,6 +72,9 @@ def pytest_configure(config):
 
 @pytest.fixture
 def identity_token(pytestconfig) -> str:
+    if pytestconfig.getoption("--skip-signing"):
+        return ""
+
     gh_token = pytestconfig.getoption("--github-token")
     session = requests.Session()
     headers = {