feat(dagger): support attestation of git repositories (#517)

Signed-off-by: Miguel Martinez Trivino <[email protected]>

Author: migmartri

extras/dagger/README.md

@@ -21,7 +21,9 @@ Initialize an attestation using the Chainloop token stored in the `CHAINLOOP_TOK
 
 ```sh
 dagger call -m github.com/chainloop-dev/chainloop/extras/dagger \
-  --token env:CHAINLOOP_TOKEN attestation-init
+  --token env:CHAINLOOP_TOKEN attestation-init \
+  --repository /path/to/repo \ # optional flag to automatically attest a Git repository
+  --contract-revision 1 # optional flag to specify the revision of the Workflow Contract (default `latest`)
 ```
 
 The result of this command will be an `attestation-id` that you will use in the next steps.

extras/dagger/main.go

@@ -23,8 +23,28 @@ func New(token *Secret) *Chainloop {
 }
 
 // Start the attestation crafting process
-func (m *Chainloop) AttestationInit(ctx context.Context) (string, error) {
-	info, err := m.cliImage().WithExec([]string{"attestation", "init", "--remote-state", "-o", "json"}).Stdout(ctx)
+func (m *Chainloop) AttestationInit(
+	ctx context.Context,
+	// Workflow Contract revision, default is the latest
+	// +optional
+	contractRevision string,
+	// Path to the git repository to be attested
+	// +optional
+	repository *Directory,
+) (string, error) {
+	// Append the contract revision to the args if provided
+	args := []string{"attestation", "init", "--remote-state", "-o", "json"}
+	if contractRevision != "" {
+		args = append(args, "--contract-revision", contractRevision)
+	}
+
+	// Mount the repository path if provided
+	c := m.cliImage()
+	if repository != nil {
+		c = c.WithDirectory(".", repository)
+	}
+
+	info, err := c.WithExec(args).Stdout(ctx)
 	if err != nil {
 		return "", fmt.Errorf("running attestation init: %w", err)
 	}