chainloop

chainloop copied to clipboard

I hit an error when trying to start the attestation crafting process. The error is: ```shell chainloop --debug attestation init DBG loaded token from robot account DBG Retrieving attestation definition...

zaibon

My ghcr.io token has expired, and all my attestations are failing now. I am getting inconsistent error messages. - I get `ERR adding material: crafting material: uploading material: rpc error:...

danlishka

Handle inline artifacts downloads

1

In https://github.com/chainloop-dev/chainloop/pull/247 (part of #201), we've added inline CAS option, which means that attestation can include artifact data embedded. The good thing is that users can get started using Chainloop...

migmartri

[plugins] decouple framework from core

1

Currently we offer a way to extend Chainloop via a [`core plugins` SDK](./app/controlplane/plugins). This mechanism has the limitation that it requires the plugin to be added to Chainloop's Control Plane...

migmartri

It's getting fairly common for build systems to output not only the artifact they are building i.e `container image` but also a in-toto attestation in the form of slsa provenance....

migmartri

A common use-case for people building and signing container images is to use cosign. Cosign allows not only to sign such container images but also in-toto attestations and SBOMS. An...

migmartri

Allow specifying the attestation id through the CLI.

2

**The problem** We have automation triggered periodically every X minutes, which scans the OCI registry for new updated artifacts/metadata, processes it, and pushes it to chainloop. We want to ensure...

danlishka

Chainloop Tools container image

2

Build the chainloop tools container image during the release process. We will use this image in various automations/integrations. The image will include the latest version of Chainloop CLI and: -...

danlishka

Create a Google Cloud Storage plugin. We can extract it from #211

danlishka

Extend extensions readme generator

1

https://github.com/chainloop-dev/chainloop/pull/191 added support for a generator that keeps extension Readme files up to date with their input schema information. We'd like to extend this generator to inject additional metadata such...

migmartri