chainloop

chainloop copied to clipboard

In the context of supporting more backend technologies for keyless signing, we want to look into [Vault PKI](https://developer.hashicorp.com/vault/docs/secrets/pki) as a CA provider.

jiparis

make contract server-side validations as good as the client side ones in the CLI

4

When creating a contract through the API, if it contains a typo on the actual fields of the json, it throws an error from the buf validation, we should return...

migmartri

`chainloop org member invite create` does not send emails to recipient

3

When invoking a `chainloop org member invite create` the identified `--recipient`, which does not send out an invite to join the organization. SMTP could be configured to enable the Chainloop...

anoncam

injecting go-releaser output with auto-discovery makes the CLI panic

1

This is if it's passed with full auto-discovery ``` Run jq -r .

migmartri

migmartri

The goal is to research the feasibility of integrating Chainloop and Sigstore by: * Letting users use a Fulcio instance to generate ephemeral signing certificates with the proper attributes (CTlog...

jiparis

* look at keyfactor example * GitHub example, implement same thing

jiparis

Implement keyless verification

2

Currently, keyless signing is in production in experimental mode, as generated attestations are not yet verifiable (because generated certificate is not stored). This task is for implementing the full verification...

jiparis

Based on [this discussion](https://github.com/chainloop-dev/chainloop/pull/964#discussion_r1642340663), we want to change the location of the new certs, basically, we will need to - Create dynamic mount points inside `/etc/ssl/cert_{i}.pem` so it doesn't override...

migmartri

auto-onboard reusable workflow issue

1

Two issues ## Job doesn't seem to fail if the workflow can't be created ## Wrong workflow name With a configuration like this one, I get the following error ```yaml...

migmartri