chainloop

chainloop copied to clipboard

The CLI and backend are rapidly evolving and currently there is no check to make sure CLI/Controlplane are compatible.

This is problematic since for example @jp-gouin ran into the following issue

- attestation.workflow.organization: value length must be at least 1 characters [string.min_len]

which was related to using a version of the CLI (0.83.0) that was not sending the required organization information in the attestation, requirement that was added in 0.87.

Implementation:

• Add a minumunVersion to the /infoz enpoint response
• Block CLI command only when there is a requirement in the backend (the case described in this task)

Another useful feature would be to add the used CLI version and digest to the local crafting state, so that these issues can be easily debugged. We would use this metadata in the render phase when doing att push.