feat(controlplane): public attestations/materials (#331)

Signed-off-by: Miguel Martinez Trivino <[email protected]>

Author: migmartri

app/cli/cmd/workflow_list.go

@@ -51,7 +51,7 @@ func WorkflowListTableOutput(workflows []*action.WorkflowItem) error {
 	}
 
 	headerRow := table.Row{"ID", "Name", "Project", "Created At", "Runner", "Last Run status"}
-	headerRowFull := table.Row{"ID", "Name", "Project", "Team", "Created At", "Runner", "Last Run status", "Last Run At", "Last Run ID", "Contract ID"}
+	headerRowFull := table.Row{"ID", "Name", "Project", "Team", "Created At", "Runner", "Last Run status", "Public", "Contract ID"}
 
 	t := newTableWriter()
 	if full {
@@ -62,14 +62,10 @@ func WorkflowListTableOutput(workflows []*action.WorkflowItem) error {
 
 	for _, p := range workflows {
 		var row table.Row
-		var lastRunRunner, lastRunState, lastRunID, lastRunAt string
+		var lastRunRunner, lastRunState string
 		if lr := p.LastRun; lr != nil {
 			lastRunRunner = lr.RunnerType
-			lastRunID = lr.ID
 			lastRunState = lr.State
-			if lr.CreatedAt != nil {
-				lastRunAt = p.CreatedAt.Format(time.RFC822)
-			}
 		}
 
 		if !full {
@@ -81,7 +77,7 @@ func WorkflowListTableOutput(workflows []*action.WorkflowItem) error {
 			row = table.Row{
 				p.ID, p.Name, p.Project, p.Team,
 				p.CreatedAt.Format(time.RFC822), lastRunRunner, lastRunState,
-				lastRunAt, lastRunID, p.ContractID,
+				p.Public, p.ContractID,
 			}
 		}
 

app/cli/internal/action/workflow_list.go

@@ -36,6 +36,10 @@ type WorkflowItem struct {
 	RunsCount  int32            `json:"runsCount"`
 	ContractID string           `json:"contractID,omitempty"`
 	LastRun    *WorkflowRunItem `json:"lastRun,omitempty"`
+	// A public workflow means that any user can
+	// - access to all its workflow runs
+	// - their attestation and materials
+	Public bool `json:"public"`
 }
 
 type WorkflowItemWithRobotAccount struct {
@@ -73,6 +77,7 @@ func pbWorkflowItemToAction(wf *pb.WorkflowItem) *WorkflowItem {
 		Project: wf.Project, Team: wf.Team, RunsCount: wf.RunsCount,
 		ContractID: wf.ContractId,
 		LastRun:    pbWorkflowRunItemToAction(wf.LastRun),
+		Public:     wf.Public,
 	}
 
 	return res

app/controlplane/api/controlplane/v1/response_messages.pb.go

@@ -33,6 +33,10 @@ message WorkflowItem {
 
   WorkflowRunItem last_run = 7;
   string contract_id = 8;
+  // A public workflow means that any user can
+  // - access to all its workflow runs
+  // - their attestation and materials
+  bool public = 9;
 }
 
 message WorkflowRunItem {

app/controlplane/api/controlplane/v1/response_messages.pb.validate.go

@@ -26,6 +26,7 @@ service WorkflowService {
 	rpc Create (WorkflowServiceCreateRequest) returns (WorkflowServiceCreateResponse);
 	rpc List (WorkflowServiceListRequest) returns (WorkflowServiceListResponse);
 	rpc Delete (WorkflowServiceDeleteRequest) returns (WorkflowServiceDeleteResponse);
+	rpc ChangeVisibility (WorkflowServiceChangeVisibilityRequest) returns (WorkflowServiceChangeVisibilityResponse);
 }
 
 message WorkflowServiceCreateRequest {
@@ -50,3 +51,15 @@ message WorkflowServiceListRequest {}
 message WorkflowServiceListResponse {
   repeated WorkflowItem result = 1;
 }
+
+message WorkflowServiceChangeVisibilityRequest {
+  string id = 1 [(validate.rules).string.uuid = true];
+  // A public workflow means that any user can
+  // - access to all its workflow runs
+  // - their attestation and materials
+  bool public = 2;
+}
+
+message WorkflowServiceChangeVisibilityResponse {
+  WorkflowItem result = 1;
+}