Skip to content

Commit

Permalink
Change the release note task for rekor 0.8.2
Browse files Browse the repository at this point in the history
In the latest version of rekor the attestation is not base64 encoded
anymore. Adapt the release notes template to account for that.

Signed-off-by: Andrea Frittoli <andrea.frittoli@uk.ibm.com>
  • Loading branch information
afrittoli authored and tekton-robot committed Jun 24, 2022
1 parent 1a6cef4 commit dd919a0
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions tekton/resources/release/base/github_release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,7 @@ spec:
Obtain the attestation:
${BQ}${BQ}${BQ}shell
REKOR_UUID=${REKOR_UUID}
rekor-cli get --uuid \$REKOR_UUID --format json | jq -r .Attestation | base64 --decode | jq
rekor-cli get --uuid \$REKOR_UUID --format json | jq -r .Attestation | jq .
${BQ}${BQ}${BQ}
Verify that all container images in the attestation are in the release file:
Expand All @@ -94,7 +94,7 @@ spec:
REKOR_UUID=${REKOR_UUID}
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=\$(rekor-cli get --uuid "\$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|.name + ":${VERSION}@sha256:" + .digest.sha256')
REKOR_ATTESTATION_IMAGES=\$(rekor-cli get --uuid "\$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":${VERSION}@sha256:" + .digest.sha256')
# Download the release file
curl "\$RELEASE_FILE" > release.yaml
Expand Down

0 comments on commit dd919a0

Please sign in to comment.