chainloop
chainloop copied to clipboard
Implement attestation workflow
Implement a workflow that translates github releases to chainloop attestations.
- It should work with a single API token
- It can create a workflow automatically
- It will download all the items of a release
- For each item, it will auto-detect (best effort) artifact types, i.e SBOM, .... or fallback to ARTIFACT
- will perform the attestation
- will add a link to the referenced release #787