feat(attestation): opt-in CAS-only attestation storage#3087
Merged
migmartri merged 1 commit intochainloop-dev:mainfrom May 4, 2026
Merged
feat(attestation): opt-in CAS-only attestation storage#3087migmartri merged 1 commit intochainloop-dev:mainfrom
migmartri merged 1 commit intochainloop-dev:mainfrom
Conversation
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
migmartri
force-pushed
the
2126-attestation-cas-only-storage
branch
3 times, most recently
from
afef5ca to
8af67c9
Compare
migmartri
commented
May 4, 2026
migmartri
force-pushed
the
2126-attestation-cas-only-storage
branch
3 times, most recently
from
1f0efa5 to
327efbe
Compare
migmartri
commented
May 4, 2026
Add a controlplane config flag attestations.skip_db_storage that, when enabled and the workflow run's CAS backend is non-inline, uploads the attestation bundle to CAS synchronously and records only the digest on the workflow run, skipping the attestation table row. Inline backends and the flag-off case keep the existing async upload and DB persistence behaviour. Refs chainloop-dev#2126 Assisted-by: Claude Code Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
migmartri
force-pushed
the
2126-attestation-cas-only-storage
branch
from
327efbe to
1f42cb5
Compare
matiasinsaurralde
approved these changes
May 4, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a controlplane config flag
attestations.skip_db_storagethat opts the platform out of writing attestation bundles to the database when an external CAS backend is configured.When the flag is on and the workflow run's CAS backend is non-inline:
attestationtable row is skipped.When the flag is off (default) or the CAS backend is inline, behaviour is unchanged: the bundle is persisted to the DB and, for non-inline backends, uploaded to CAS asynchronously.
Closes #2126
AI disclosure: this contribution was assisted by Claude Code.