Skip to content

Conversation

@javirln
Copy link
Member

@javirln javirln commented Jan 15, 2026

This PR adds the ability to display a clickable link to view attestations in the platform UI after a successful attestation push command.

Helm Chart:

  • Added uiDashboardUrl configuration field to values.yaml for operators to set the platform UI URL
  • Updated configmap template to inject the platform URL into the control plane bootstrap configuration

CLI:

  • Added logic to fetch the platform URL from the control plane's /infoz endpoint
  • Display attestation view link after successful push in the format: https://example.com/attestation/{digest}?tab=summary
  • Link only appears in table output format (not JSON/YAML) and is hidden in dry-run mode
  • Displays the attestation url on attestation status and workflow workflow-run describe commands

Configuration

Operators can enable this feature by setting the platform URL in Helm values:

controlplane:
  uiDashboardURL: "https://example.com"

When configured, users will see the attestation link immediately after pushing, even if policy violations occur.

Examples:

Describe

❯ ./chainloop workflow workflow-run describe --id 1aa6179b-87d5-452e-93a8-426cb0b8fe5a
WRN API contacted in insecure mode
┌─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐
│ Workflow                                                                                                                                            │
├─────────────────────────────┬───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
│ ID                          │ b579a8c0-98f2-4945-99db-a92f17bedaa5                                                                                  │
│ Name                        │ wasi-workflow                                                                                                         │
│ Team                        │                                                                                                                       │
│ Project                     │ core                                                                                                                  │
│ Version                     │ v1.71.1+next (prerelease)                                                                                             │
├─────────────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
│ Workflow Run                │                                                                                                                       │
├─────────────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
│ ID                          │ 1aa6179b-87d5-452e-93a8-426cb0b8fe5a                                                                                  │
│ Initialized At              │ 16 Jan 26 09:53 UTC                                                                                                   │
│ Finished At                 │ 16 Jan 26 09:54 UTC                                                                                                   │
│ State                       │ success                                                                                                               │
│ Policy Status               │ passed                                                                                                                │
│ Runner Link                 │                                                                                                                       │
├─────────────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
│ Statement                   │                                                                                                                       │
├─────────────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
│ Payload Type                │ application/vnd.in-toto+json                                                                                          │
│ Digest                      │ sha256:16f6c58c3499af23ddb127d8dc92728b20ac8d699b312109bff7bf09b7f87229                                               │
│ Verified                    │ true                                                                                                                  │
│ Policies violation strategy │ ADVISORY                                                                                                              │
│ Attestation View URL        │ http://localhost:3000/attestation/sha256:16f6c58c3499af23ddb127d8dc92728b20ac8d699b312109bff7bf09b7f87229?tab=summary │
└─────────────────────────────┴───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘
INF you can use the flag "--output statement" to see the full in-toto statement

Push

❯ ./chainloop attestation push
WRN API contacted in insecure mode
INF push completed
┌───────────────────────────┬───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐
│ Initialized At            │ 16 Jan 26 09:53 UTC                                                                                                   │
├───────────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
│ Attestation ID            │ 1aa6179b-87d5-452e-93a8-426cb0b8fe5a                                                                                  │
│ Digest                    │ sha256:16f6c58c3499af23ddb127d8dc92728b20ac8d699b312109bff7bf09b7f87229                                               │
│ Organization              │ testing                                                                                                               │
│ Name                      │ wasi-workflow                                                                                                         │
│ Project                   │ core                                                                                                                  │
│ Version                   │ v1.71.1+next (prerelease)                                                                                             │
│ Contract                  │ wasi-contract (revision 1)                                                                                            │
│ Policy violation strategy │ ADVISORY                                                                                                              │
│ Attestation View URL      │ http://localhost:3000/attestation/sha256:16f6c58c3499af23ddb127d8dc92728b20ac8d699b312109bff7bf09b7f87229?tab=summary │
└───────────────────────────┴───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘

@javirln javirln requested review from jiparis and migmartri January 15, 2026 10:32
@javirln javirln self-assigned this Jan 15, 2026
Copy link
Member

@migmartri migmartri left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See my comments, basically

  • rename platform references for uiDashboard or similar, in other words, describe the actual component
  • add the link in attestation status and describe outputs :)

Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
@javirln javirln merged commit 14e2264 into chainloop-dev:main Jan 16, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants