v0.91.0

Highlights

This release focused on improving attestation process usability by

• deprecating the use of robot accounts for attestations in favor of the more versatile API Tokens #891
• enabling a preview of keyless signing #865
• enabling optional contract-less pieces of evidence #815

You can see these new features in our new quickstart guide, that'll get you up and running in no time! 🚀

What's Changed

• Bump Helm Chart Version => v0.90.1 by @github-actions in #882
• fix(workflows): Place correct permissions in workflow by @javirln in #885
• feat(keyless): add keyless config to deployment template by @jiparis in #878
• feat(docs): add cookie consent script by @tknura in #879
• feat(docs): update youtube video links to use privacy mode by @tknura in #877
• test(keyless): tests for renderer by @jiparis in #887
• feat(dagger): Support workflow-name on dagger module attestations by @javirln in #875
• feat(dagger): Allow auto discovery of materials by @javirln in #886
• chore: do not create robot-account automatically by @migmartri in #890
• feat(dagger): Make signing keys optional and workflow-name required by @javirln in #895
• remove robot-account from CLI by @migmartri in #894
• fix(keyless): improve UX for keyless when chainloop CA is not configured by @jiparis in #896
• feat(workflows-chainloop): Consolidates robot accounts into API token by @javirln in #876
• fix: load chainloop_token gracefully if auth login has happened before by @migmartri in #897
• fix(workflows-chainloop): Add missing --workflow-name on codeql by @javirln in #898
• refactor: remove workflow_name env var by @migmartri in #899
• fix(docs): fix code-blocks, theme and admonitions by @migmartri in #906
• feat: raw token output in CLI by @migmartri in #907
• feat(docs): Chainloop quickstart by @jiparis in #902
• fix(cli): do not double render the envelope on attestation push by @migmartri in #909
• fix(workflows-build-and-package): Add missing workflow-name by @javirln in #912

Full Changelog: v0.90.1...v0.91.0

Chainloop Attestation

View the attestation of this release