You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: cmd/kosli/testdata/output/docs/snyk.md
+5-6Lines changed: 5 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,15 +19,14 @@ By default, the `--scan-results` .json file is also uploaded to Kosli's evidence
19
19
You can disable that by setting `--upload-results=false`
20
20
21
21
22
-
The attestation can be bound to a trail using the trail name.
23
-
24
-
If the attestation is for an artifact, the attestation can be bound to the artifact using one of two ways:
22
+
The attestation can be bound to a *trail* using the trail name.
23
+
The attestation can be bound to an *artifact* in two ways:
25
24
- using the artifact's SHA256 fingerprint which is calculated (based on the `--artifact-type` flag and the artifact name/path argument) or can be provided directly (with the `--fingerprint` flag).
26
25
- using the artifact's name in the flow yaml template and the git commit from which the artifact is/will be created. Useful when reporting an attestation before creating/reporting the artifact.
27
26
28
-
You can optionally associate the attestation to a git commit using `--commit` (requires access to a git repo). And you
29
-
can optionally redact some of the git commit data sent to Kosli using `--redact-commit-info`.
30
-
Note that when the attestation is reported for an artifact that does not yet exist in Kosli, `--commit`becomes required to facilitate
27
+
You can optionally associate the attestation to a git commit using `--commit` (requires access to a git repo).
28
+
You can optionally redact some of the git commit data sent to Kosli using `--redact-commit-info`.
29
+
Note that when the attestation is reported for an artifact that does not yet exist in Kosli, `--commit`is required to facilitate
0 commit comments