ci: add sigstore as a downstream test (#12054)

* ci: add sigstore as a downstream test

Signed-off-by: William Woodruff <william@trailofbits.com>

* sigstore: place it in /tmp

Signed-off-by: William Woodruff <william@trailofbits.com>

* sigstore: add a NOTE

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>

.github/downstream.d/sigstore.sh

@@ -0,0 +1,19 @@
+#!/bin/bash -ex
+
+case "${1}" in
+    install)
+        # NOTE: placed in /tmp to avoid inscrutable pytest failures
+        # with 'unrecognized arguments: --benchmark-disable'
+        git clone --depth=1 https://github.com/sigstore/sigstore-python /tmp/sigstore-python
+        cd /tmp/sigstore-python
+        git rev-parse HEAD
+        pip install -e ".[test]"
+        ;;
+    run)
+        cd /tmp/sigstore-python
+        pytest test
+        ;;
+    *)
+        exit 1
+        ;;
+esac

.github/workflows/ci.yml

@@ -371,6 +371,7 @@ jobs:
           - certbot-josepy
           - mitmproxy
           - scapy
+          - sigstore
         PYTHON:
           - '3.12'
     name: "Downstream tests for ${{ matrix.DOWNSTREAM }}"