chore(attestations): add STRING materials to referrer graph (#1680)

Signed-off-by: Jose I. Paris <[email protected]>

Author: jiparis

app/controlplane/api/gen/frontend/attestation/v1/crafting_state.ts

@@ -68,7 +68,7 @@ func (m *Attestation_Material) NormalizedOutput() (*NormalizedMaterialOutput, er
 	}
 
 	if a := m.GetString_(); a != nil {
-		return &NormalizedMaterialOutput{Content: []byte(a.Value)}, nil
+		return &NormalizedMaterialOutput{Content: []byte(a.Value), Digest: a.GetDigest()}, nil
 	}
 
 	if a := m.GetArtifact(); a != nil {

app/controlplane/api/gen/jsonschema/attestation.v1.Attestation.Material.KeyVal.jsonschema.json

@@ -58,6 +58,8 @@ message Attestation {
     message KeyVal {
       string id = 1 [(buf.validate.field).string.min_len = 1];
       string value = 2 [(buf.validate.field).string.min_len = 1];
+
+      string digest = 3 [(buf.validate.field).string.min_len = 1];
     }
 
     message ContainerImage {

app/controlplane/api/gen/jsonschema/attestation.v1.Attestation.Material.KeyVal.schema.json

@@ -45,7 +45,7 @@ func TestCraft(t *testing.T) {
 	assert.Equal(contractAPI.CraftingSchema_Material_STRING, got.MaterialType)
 	assert.False(got.UploadedToCas)
 	assert.Equal(got.GetString_(), &attestationApi.Attestation_Material_KeyVal{
-		Id: "test", Value: "test-value",
+		Id: "test", Value: "test-value", Digest: "sha256:5b1406fffc9de5537eb35a845c99521f26fba0e772d58b42e09f4221b9e043ae",
 	})
 
 	// Timestamp

pkg/attestation/crafter/api/attestation/v1/crafting_state.go

@@ -18,9 +18,11 @@ package materials
 import (
 	"context"
 	"fmt"
+	"strings"
 
 	schemaapi "github.com/chainloop-dev/chainloop/app/controlplane/api/workflowcontract/v1"
 	api "github.com/chainloop-dev/chainloop/pkg/attestation/crafter/api/attestation/v1"
+	cr_v1 "github.com/google/go-containerregistry/pkg/v1"
 )
 
 type StringCrafter struct {
@@ -38,11 +40,15 @@ func NewStringCrafter(materialSchema *schemaapi.CraftingSchema_Material) (*Strin
 }
 
 func (i *StringCrafter) Craft(_ context.Context, value string) (*api.Attestation_Material, error) {
+	hash, _, err := cr_v1.SHA256(strings.NewReader(value))
+	if err != nil {
+		return nil, fmt.Errorf("generating digest: %w", err)
+	}
 	return &api.Attestation_Material{
 		MaterialType: i.input.Type,
 		M: &api.Attestation_Material_String_{
 			String_: &api.Attestation_Material_KeyVal{
-				Id: i.input.Name, Value: value,
+				Id: i.input.Name, Value: value, Digest: hash.String(),
 			},
 		},
 	}, nil

pkg/attestation/crafter/api/attestation/v1/crafting_state.pb.go

@@ -77,6 +77,6 @@ func TestStringCraft(t *testing.T) {
 	assert.Equal(contractAPI.CraftingSchema_Material_STRING, got.MaterialType)
 	assert.False(got.UploadedToCas)
 	assert.Equal(got.GetString_(), &attestationApi.Attestation_Material_KeyVal{
-		Id: "test", Value: "value",
+		Id: "test", Value: "value", Digest: "sha256:cd42404d52ad55ccfa9aca4adc828aa5800ad9d385a0671fbcbf724118320619",
 	})
 }

pkg/attestation/crafter/api/attestation/v1/crafting_state.proto

@@ -462,6 +462,10 @@ func normalizeMaterial(material *intoto.ResourceDescriptor) (*NormalizedMaterial
 		}
 
 		m.Value = string(material.Content)
+		hash, ok := material.Digest["sha256"]
+		if ok {
+			m.Hash = &crv1.Hash{Algorithm: "sha256", Hex: hash}
+		}
 
 		return m, nil
 	}