Skip to content

Conversation

@migmartri
Copy link
Member

@migmartri migmartri commented Feb 13, 2024

Dagger module of the Chainloop client that can be used to attest and collect pieces of evidence from your Dagger pipelines.

Note: This module requires Chainloop v0.60.0 or newer which contains support for stateless attestations #494

The attestation process starts with its initialization (attestation-init), then adding as many materials/pieces of evidence as needed (attestation-add), and finally, signing and pushing the attestation to the Chainloop control plane (attestation-push).

This module implements all those functions so they can be executed either via the dagger CLI (see demo below) or by being imported by other Degger modules.

$ dagger functions
┃ Name                 Description                                                                                                     
┃ attestation-add      Add a piece of evidence/material to the current attestation                                                     
┃ attestation-init     Start the attestation crafting process                                                                          
┃ attestation-push     Generate, sign and push the attestation to the control plane                                                    
┃ attestation-reset    Mark current attestation process as canceled or failed. --trigger = "failure" | "cancellation" (default: "failur
┃ )                                                                                                                                    
┃ attestation-status   Check the status of the current attestation     

Demo using the CLI

dagger-demo.mp4

Closes #501

Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
@migmartri migmartri marked this pull request as ready for review February 13, 2024 18:58
@migmartri migmartri requested a review from danlishka February 13, 2024 18:58
Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>
Copy link
Member

@danlishka danlishka left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! I would add a bit more on contracts in the documentation - we do not mention contracts at all, but they are an important part of the attestation process provided by Chainloop.

@migmartri migmartri merged commit bacb7c7 into chainloop-dev:main Feb 13, 2024
@migmartri migmartri deleted the OSS-27 branch February 13, 2024 22:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: Create Dagger Module

2 participants