Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

invocation.configSource.uri does not conform to SLSA schema #934

Open
lcarva opened this issue Oct 4, 2023 · 0 comments
Open

invocation.configSource.uri does not conform to SLSA schema #934

lcarva opened this issue Oct 4, 2023 · 0 comments
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@lcarva
Copy link
Contributor

lcarva commented Oct 4, 2023

Expected Behavior

According to its schema, the attribute invocation.configSource.uri of a v0.2 SLSA Provenance is expected to be an URI, e.g. , e.g.: oci://quay.io/<org>/<repo>

Actual Behavior

In 0.17.0, the invocation.configSource.uri attribute does not conform to an URI schema, e.g.: quay.io/<org>/<repo>.

This is similar to the issue fixed in #792.

@lcarva lcarva added the kind/bug Categorizes issue or PR as related to a bug. label Oct 4, 2023
lcarva added a commit to lcarva/ec-cli that referenced this issue Oct 4, 2023
Chains is not populating the `invocation.configSource.uri` attribute
correctly, due to tektoncd/chains#934

This change relaxes the schema validation until the issue in Chains is
fixed and widely adopted.

Ref: RHTAPBUGS-857

Signed-off-by: Luiz Carvalho <[email protected]>
lcarva added a commit to lcarva/ec-cli that referenced this issue Oct 4, 2023
Chains is not populating the `invocation.configSource.uri` attribute
correctly, due to tektoncd/chains#934

This change relaxes the schema validation until the issue in Chains is
fixed and widely adopted.

Ref: RHTAPBUGS-857

Signed-off-by: Luiz Carvalho <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

No branches or pull requests

1 participant