Configures the workflow to record the attestation of the build.
This version of the contract does not add any materials yet but just the runner environment option. In a future patch we'll store the binaries in the CAS as well.
Note: I've updated the contract in Chainloop controlplane via
chainloop wf contract update --name goket-release -f ./release.cue --id 4e95e9aa-01e7-4b0e-8088-19f6972e89e5
and after the integration this is the result of one run
chainloop wf run describe --id 3eff0034-f285-431e-9e4a-d5e04c094f5e
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Workflow β
ββββββββββββββββββ¬βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β ID β 3da0b2a9-f56b-4e7d-bf41-6f80b2c92faf β
β Name β release β
β Team β goket-app maintainers β
β Project β goket-app β
ββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Workflow Run β β
ββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β ID β 3eff0034-f285-431e-9e4a-d5e04c094f5e β
β Initialized At β 04 Jan 23 14:54 UTC β
β Finished At β 04 Jan 23 14:54 UTC β
β State β success β
β Runner Link β https://github.com/goket-app/goket/actions/runs/3839053663 β
ββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Statement β β
ββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ€
β Payload Type β application/vnd.in-toto+json β
β Verified β false β
ββββββββββββββββββ΄βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Environment Variables β
βββββββββββββββββββββββββββ¬βββββββββββββββββββββββββββββββββββββββββββ€
β NAME β VALUE β
βββββββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββββ€
β GITHUB_ACTOR β migmartri β
β GITHUB_REF β refs/tags/v0.0.02 β
β GITHUB_REPOSITORY β goket-app/goket β
β GITHUB_REPOSITORY_OWNER β goket-app β
β GITHUB_RUN_ID β 3839053663 β
β GITHUB_SHA β 8fef420902c7f4968fce8c12c7842e55d534d2d7 β
β RUNNER_NAME β Hosted Agent β
β RUNNER_OS β Linux β
βββββββββββββββββββββββββββ΄βββββββββββββββββββββββββββββββββββββββββββ
or if you prefer, here it is the raw statement
chainloop wf run describe --id 3eff0034-f285-431e-9e4a-d5e04c094f5e -o statement
{
"_type": "https://in-toto.io/Statement/v0.1",
"predicateType": "chainloop.dev/attestation/v0.1",
"subject": [
{
"name": "chainloop.dev/workflow/release",
"digest": {
"sha256": "879dcf1dd49f2a14e9a963b32a85a281837b7f3bb11e23e65adf7e98540331b2"
}
}
],
"predicate": {
"buildType": "chainloop.dev/workflowrun/v0.1",
"builder": {
"id": "chainloop.dev/cli/0.8.56@sha256:249dcca2bfbb321c6e93b31c562d8b84d56eb1250fb6de757f65c366eb6d6ec2"
},
"env": {
"GITHUB_ACTOR": "migmartri",
"GITHUB_REF": "refs/tags/v0.0.02",
"GITHUB_REPOSITORY": "goket-app/goket",
"GITHUB_REPOSITORY_OWNER": "goket-app",
"GITHUB_RUN_ID": "3839053663",
"GITHUB_SHA": "8fef420902c7f4968fce8c12c7842e55d534d2d7",
"RUNNER_NAME": "Hosted Agent",
"RUNNER_OS": "Linux"
},
"metadata": {
"finishedAt": "2023-01-04T14:54:38.555929712Z",
"initializedAt": "2023-01-04T14:54:00.363652265Z",
"name": "release",
"project": "goket-app",
"team": "goket-app maintainers",
"workflowID": "3da0b2a9-f56b-4e7d-bf41-6f80b2c92faf",
"workflowRunID": "3eff0034-f285-431e-9e4a-d5e04c094f5e"
},
"runnerType": "GITHUB_ACTION",
"runnerURL": "https://github.com/goket-app/goket/actions/runs/3839053663"
}
}