feat(attestation): Include attestation output automatically on GitHub and GitLab reports #2668
+119
−10
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
… and GitLab reports Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
javirln
commented
Jan 14, 2026
Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
jiparis
approved these changes
Jan 15, 2026
Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
Signed-off-by: Javier Rodriguez <javier@chainloop.dev>
jiparis
reviewed
Jan 15, 2026
| } | ||
| // Render the attestation status to a string | ||
| buf := &bytes.Buffer{} | ||
| if err := fullStatusTableWithWriter(res.Status, buf); err != nil { |
Member
There was a problem hiding this comment.
This could receive a boolean for ANSI colors, and defer the table rendering to the last step. Then, from the runner, the flag would be set to false, deactivating colors.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR adds automatic attestation report generation for GitHub Actions and GitLab CI platforms.
Changes
Runner Interface Extension
Extended the
SupportedRunnerinterface with aReport(tableOutput []byte) errormethod. This method is called by the CLI command layer after successful attestation push to write formatted attestation status to platform-specific locations.Platform Implementations
$GITHUB_STEP_SUMMARYwrapped in a markdown code block, making it visible in the job summary UIchainloop-attestation-report.txtas a downloadable artifact with instructions on how to access itCLI Integration
The
attestation pushcommand now automatically reports attestation status to the CI/CD platform after successful push. The runner instance is accessed viaAttestationResultRunnerContext.RawRunnerand the report is rendered using existing table formatting functions from the cmd layer.Opt-out Support
Added
--deactivate-ci-reportflag to disable automatic reporting when needed.Error Handling
Report failures are logged as warnings but do not fail the attestation push operation.
Examples
GitHub
GitLab
Ref: #2667