v0.87.1

Additional Attestation Authz provider, Chainloop API token

A new released on Chainloop is live and with it, the support of API Tokens on the creation of Workflows and Attestations life cycle 🎉

Now it's possible to create Workflows directly using an API Token beside the regular Robot Accounts, just pass the flag --skip-robot-account-create to avoid creating unnecessary Robot Account:

$ chainloop wf create --name javirln-demo-wf --description "Showcase of API Token creating wf" --project core --token $API_TOKEN --skip-robot-account-create
INF API token provided to the command line
┌──────────────────────────────────────┬─────────────────┬─────────┬─────────────────────┬────────┬─────────────────┐
│ ID                                   │ NAME            │ PROJECT │ CREATED AT          │ RUNNER │ LAST RUN STATUS │
├──────────────────────────────────────┼─────────────────┼─────────┼─────────────────────┼────────┼─────────────────┤
│ 0cfff272-2a7d-43cf-bbb0-087043fc028c │ javirln-demo-wf │ core    │ 13 May 24 11:08 UTC │        │                 │
└──────────────────────────────────────┴─────────────────┴─────────┴─────────────────────┴────────┴─────────────────┘

And start a new attestation with them, just pass the new flag workflow-name or set the env variable CHAINLOOP_WORKFLOW_NAME:

$ chainloop attestation init --workflow-name javirln-demo-wf --token $API_TOKEN
INF Attestation initialized! now you can check its status or add materials to it
┌───────────────────┬──────────────────────────────────────┐
│ Initialized At    │ 13 May 24 12:23 UTC                  │
├───────────────────┼──────────────────────────────────────┤
│ Attestation ID    │ 810472ab-484f-4499-8805-f2024d2b4a47 │
│ Name              │ javirln-demo-wf                      │
│ Team              │                                      │
│ Project           │ core                                 │
│ Contract Revision │ 1                                    │
└───────────────────┴──────────────────────────────────────┘

What's Changed

• Bump Helm Chart Version => v0.86.0 by @github-actions in #759
• chore(ci): bump chainloop CLI version by @migmartri in #760
• feat(tokens): allow API tokens to create and read workflows by @jiparis in #762
• Revert "feat(policies): Add attestation as new resource type and workflow create permission (#754) by @javirln in #758
• fix(chainloop): add missing policy by @jiparis in #764
• chore(controlplane): remove robot-account relationship from workflowrun by @migmartri in #765
• feat(attestations): support API tokens for attestations by @javirln in #763
• refactor(cli): Use attestation state to pass workflow-name by @javirln in #766
• Bump Helm Chart Version => v0.87.0 by @github-actions in #767
• chore(docs): enable posthog by @migmartri in #769
• fix(attestation): Send workflow-name on attestation init API call by @javirln in #768

Full Changelog: v0.86.0...v0.87.1