certsync-pipeline