Sign

# Sign task

This is a signing task that signs the contents of debusine:signing-input artifacts on a signing worker.

The `task_data` for this task may contain the following keys:

- `purpose` (required): the purpose of the key to sign with: `uefi` or `openpgp` (needed separately from `key` so that the scheduler can check whether the worker has the necessary tools available)

- `unsigned` (Multiple lookup, required): the debusine:signing-input artifacts whose contents should be signed

- `key` (string, required): the fingerprint of a debusine:signing-key asset to sign with; must match `purpose`

The output will be provided as debusine:signing-output artifacts, each of which is related to the corresponding debusine:signing-input artifact.