v0.20.0

CAS performance improvements

This release improves the stability and performance of our CAS proxy. It improves the handle of high latency scenarios and unreliable networks #375 (comment)

Automatic git information gathering

The attestation CLI will not automatically discover if the attestation process is happening inside a git repo, if so, it will record the head commit digest.

{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "chainloop.dev/attestation/v0.2",
  "subject": [
    {
      "name": "chainloop.workflow.empty",
      "digest": {
        "sha256": "eec3f9e5bd477a5d95c4aea898d8ce05339e658a9634e090514746e9a2e8ca84"
      }
    },
    {
      "name": "git.head",
      "digest": {
        "sha1": "83d34125f5f6abe66c450fc1ed37ec630a7d4101"
      }
    }
  ],
  "predicate": {
    "metadata": {
      "name": "empty",
      "project": "empty",
...

Changelog

• d8ccd9f feat: add commit digest in subject (#382)
• 46431db fix(cas): improve upload speeds (#381)
• fd2c59e fix(cas): handle client cancellation (#378)
• af920e3 chore: remove OCI registry plugin (#372)
• 4b8af6e Bump Chart Version v0.19.1 (#371)
• ee97966 chore: update scorecard action (#370)