Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Install Chainloop
run: |
curl -sfL https://docs.chainloop.dev/install.sh | bash -s
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s

- name: Initialize Attestation
id: init_attestation
Expand Down Expand Up @@ -61,7 +61,7 @@ jobs:

- name: Install Chainloop
run: |
curl -sfL https://docs.chainloop.dev/install.sh | bash -s
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s

- name: Checkout
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
Expand Down Expand Up @@ -112,11 +112,11 @@ jobs:
# exclude latest tag
if [[ $entry != *latest ]]; then
material_name="$(echo $entry | sed 's#.*/##')"

syft -o cyclonedx-json=/tmp/sbom-$material_name.cyclonedx.json $entry
chainloop attestation add --value $entry --kind CONTAINER_IMAGE --attestation-id ${{ env.ATTESTATION_ID }}
chainloop attestation add --value /tmp/sbom-$material_name.cyclonedx.json --kind SBOM_CYCLONEDX_JSON --attestation-id ${{ env.ATTESTATION_ID }}

# Upload the SBOM to the release
gh release upload ${{ github.ref_name }} /tmp/sbom-$material_name.cyclonedx.json --clobber
fi
Expand Down Expand Up @@ -178,10 +178,10 @@ jobs:

- name: Include source code on attestation
run: |
# This needs to run AFTER goreleaser to make sure the source code is available
# This needs to run AFTER goreleaser to make sure the source code is available

gh release download ${{ github.ref_name }} -A tar.gz -O /tmp/source-code.tar.gz
chainloop attestation add --name source-code --value /tmp/source-code.tar.gz --kind ARTIFACT --attestation-id ${{ env.ATTESTATION_ID }}
gh release download ${{ github.ref_name }} -A tar.gz -O /tmp/source-code.tar.gz
chainloop attestation add --name source-code --value /tmp/source-code.tar.gz --kind ARTIFACT --attestation-id ${{ env.ATTESTATION_ID }}

- name: Bump Chart and Dagger Version
run: .github/workflows/utils/bump-chart-and-dagger-version.sh deployment/chainloop extras/dagger ${{ github.ref_name }}
Expand Down Expand Up @@ -214,7 +214,7 @@ jobs:
steps:
- name: Install Chainloop
run: |
curl -sfL https://docs.chainloop.dev/install.sh | bash -s
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s

- name: Finish and Record Attestation
id: attestation_push
Expand Down
2 changes: 1 addition & 1 deletion docs/docs/getting-started/attestation-crafting.md
Original file line number Diff line number Diff line change
Expand Up @@ -278,7 +278,7 @@ jobs:
# highlight-start
- name: Install Chainloop
run: |
curl -sfL https://docs.chainloop.dev/install.sh | bash -s -- --version v${{ env.CHAINLOOP_VERSION }}
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --version v${{ env.CHAINLOOP_VERSION }}
# highlight-end
- name: Checkout
uses: actions/checkout@v4
Expand Down
8 changes: 4 additions & 4 deletions docs/docs/getting-started/installation.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -24,26 +24,26 @@ To **install the latest version** for macOS, Linux or Windows (using [WSL](https
<TabItem value="script" label="Installation Script" default>

```bash
curl -sfL https://docs.chainloop.dev/install.sh | bash -s
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s
```

you can retrieve a specific version with

```bash
# You can find all the available versions at https://github.com/chainloop-dev/chainloop/releases
curl -sfL https://docs.chainloop.dev/install.sh | bash -s -- --version vx.x.x
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --version vx.x.x
```

and customize the install path (default to /usr/local/bin)

```bash
curl -sfL https://docs.chainloop.dev/install.sh | bash -s -- --path /my-path
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --path /my-path
```

if [`cosign`](https://docs.sigstore.dev/cosign) is present in your system, in addition to the checksum check, a signature verification will be performed. This behavior can be enforced via the `--force-verification` flag.

```bash
curl -sfL https://docs.chainloop.dev/install.sh | bash -s -- --force-verification
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --force-verification
```

</TabItem>
Expand Down
2 changes: 1 addition & 1 deletion docs/docs/quickstart.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ This quickstart will guide you through the process of installing the Chainloop C
1. Install CLI by running:

```bash
curl -sfL https://docs.chainloop.dev/install.sh | bash -s
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s
```
Refer to [these instructions](/getting-started/installation) for more installation options.

Expand Down
2 changes: 1 addition & 1 deletion docs/examples/ci-workflows/github.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:

- name: Install Chainloop
run: |
curl -sfL https://docs.chainloop.dev/install.sh | bash -s -- --version v${{ env.CHAINLOOP_VERSION }}
curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --version v${{ env.CHAINLOOP_VERSION }}

- name: Checkout
uses: actions/checkout@v4
Expand Down
2 changes: 1 addition & 1 deletion docs/examples/ci-workflows/gitlab.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ download_chainloop:
- tags
script:
# We need to install it in the current path in order to be archived
- curl -sfL https://docs.chainloop.dev/install.sh | bash -s -- --path .
- curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --path .
artifacts:
paths:
- chainloop
Expand Down
Loading