Signing Transforms

Signing kinds are passed a single dependent job (from its kind dependency) to act on.

The transforms in taskcluster/gecko_taskgraph/transforms/ implement this common functionality. They expect a “signing description”, and produce a task definition. The schema for a signing description is defined at the top of, with copious comments.

In particular you define a set of upstream artifact urls (that point at the dependent task) and can optionally provide a dependent name (defaults to build) for use in task-reference/artifact-reference. You also need to provide the signing formats to use.