Open toddysm opened 1 year ago
Move to post v1 release, as it is not critical for v1 release cc @vaninrao10
Moved this issue to v1.2.0 milestone and linking #834 as we are improving all error messages in v1.2.0.
Move the status message to the first line sounds reasonable because in general users care about the operation result at the first. Warning message is a follow-up reminder that users should be paying attention to.
For the operation status, I think it is not necessary to show SUCCESS
or FAILURE
at the beginning because when operation succeeded or failed, the error message starts with Successfully xxx
or Error:
. This is obvious for users.
How about improve the success and error messages as follows?
Successfully verified for signature for artifact ghcr.io/toddysm/flasksample@sha256:b4c0ed46d75ff7a1e8bcc166156db356dbb3768181d010a639ad4b4dd2f43db7
Warning: Always verify the artifact using digest(@sha256:...) rather than a tag(:kubeconeu-demo-v1) because resolved digest may not point to the same signed artifact, as tags are mutable.
Error: Failed to verify the signature for artifact "ghcr.io/toddysm/net-monitor@sha256:8c7a3bba4f87b1b9dc01e74b0a3b29cfa3fe492c320d536de87ce1ff67072442". There is no applicable trust policy for that scope.
Warning: Always verify the artifact using digest(@sha256:...) rather than a tag(:kubeconeu-demo-v1) because resolved digest may not point to the same signed artifact, as tags are mutable.
Warning messages may be generated dynamically during the verification process. Any delay in displaying these warning messages will prevent users from knowing the current status of the verification. Are there any well-known CLIs that also delay showing warnings, so we can follow best practices? @FeynmanZhou @toddysm
What is the areas you experience the issue in?
Notation CLI
What is not working as expected?
The following two output messages from
notation verify
look very similar although one is successful and the other is error:What did you expect to happen?
We should rework those to make it obvious what is the result of the command. Right now they both start with the
warning
and this is the first thing the user sees. The user is more interested in the result of the command than thewarning
. An example can be:and
Adding white space and moving the
warning
to secondary provides better usability. Also, the current messages are not consistent in the language and not capitalized and grammatically correct.How can we reproduce it?
Use the commands above
Describe your environment
N/A
What is the version of your Notation CLI or Notation Library?
Notation: Notary v2, A tool to sign, store, and verify artifacts.
Version: 1.0.0-rc.3 Go version: go1.20.1 Git commit: 233c0ea71edfb68b951eb54a739a101e2a05cd26