chainloop

chainloop copied to clipboard

Add indexes to workflows and workflow runs

3

There are some queries that can be improved in terms of performance by adding some indexes, for example the retrieval of workflow runs based on a workflow, currently, the SQL...

javirln

Quick PR to update the values.yaml example, as it included an invalid name.

jiparis

CLI supports overwriting materials with multiple `att add --name material-name` calls. When this happens, evaluations should be reset as well.

jiparis

The goal is to avoid having duplicated policies in a contract, applied to the same materials/attestation. The check could be done during contract crafting, but also at attestation time. It...

jiparis

When a remote policy fails to be fetched we show an error that doesn't tell me which one actually failed. We should show which one couldn't be loaded. ``` chainloop...

migmartri

Currently, policy attachments are not validated (other than plain protobuf validation). The goal is to perform a server-side validation for remote policies. This is: 1) parse contract for remote policies,...

jiparis

improve how we show validation errors

3

We are currently showing validations errors like this excerpt from https://github.com/chainloop-dev/chainloop/issues/1206 ``` chainloop workflow create --name build --project xy --team abc ERR failed to create workflow: rpc error: code =...

migmartri

standardize Helm Chart with Bitnami Practices

1

From [https://github.com/bitnami/charts/pull/27100#issuecomment-2256043379](https://github.com/bitnami/charts/pull/27100#issuecomment-2256043379) NOTE: It's essential to evaluate and discuss each breaking change we might add to the chart. ```[tasklist] ### Tasks - [x] Openshift settings - [x] hardcoded ports in...

migmartri

add basic helm template sanitize and output in CI

1

To avoid problems like this one https://github.com/chainloop-dev/chainloop/issues/1189 we should add some basic CI checks for the Helm Chart rendering. What I'd do - On PR, if the helm chart directory...

migmartri

CLI command to evaluate policies

2

it would be useful to have something like `chainloop policy eval` that receives a material and a policy (file, URL) and returns a report with potential violations. I would be...

jiparis