buildsec / frsca

https://buildsec.github.io/frsca
Apache License 2.0
227 stars 31 forks source link

Update Tekton Chains v0.13.0 -> v0.15.0 #411

Closed bradbeck closed 1 year ago

bradbeck commented 1 year ago

Update Tekton Chains to v0.15.0

Release: https://github.com/tektoncd/chains/releases/tag/v0.15.0

sudo-bmitch commented 1 year ago

Do we need another change for the tkn chain payload command?

$ tkn chain payload "${TASK_RUN}"
Error: failed to retrieve the backend storage: failed to retrieve the backend storage: error creating tekton chains configuration: failed to parse data: invalid value "slsa/v1" wanted one of [in-toto tekton]

$ tkn version
Client version: 0.29.1
Chains version: v0.15.0
Pipeline version: v0.41.0
Triggers version: v0.22.0
sudo-bmitch commented 1 year ago

tkn chain payload support is likely pending this PR: https://github.com/tektoncd/cli/pull/1913

bradbeck commented 1 year ago

tkn chain payload appears to work in tkn v0.30.0:

$ tkn version
Client version: 0.30.0
Chains version: v0.15.0
Pipeline version: v0.41.0
Triggers version: v0.22.0

$ tkn chain payload "${TASK_RUN}"
{"_type":"https://in-toto.io/Statement/v0.1", ...