Skip to content

Conversation

@trumant
Copy link
Contributor

@trumant trumant commented May 16, 2025

Summary

This change adds additional documentation to the no-upload option of the cosign attest command to clarify that when the option is used, the produced attestation is written to STDOUT

Closes #4163

Release Note

NONE

Documentation

@trumant trumant requested a review from a team as a code owner May 16, 2025 13:11
@codecov
Copy link

codecov bot commented May 16, 2025

Codecov Report

Attention: Patch coverage is 75.00000% with 1 line in your changes missing coverage. Please review.

Project coverage is 34.39%. Comparing base (2ef6022) to head (b7dceb4).
Report is 411 commits behind head on main.

Files with missing lines Patch % Lines
cmd/cosign/cli/options/attest.go 0.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4206      +/-   ##
==========================================
- Coverage   40.10%   34.39%   -5.72%     
==========================================
  Files         155      211      +56     
  Lines       10044    14062    +4018     
==========================================
+ Hits         4028     4836     +808     
- Misses       5530     8613    +3083     
- Partials      486      613     +127     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

This change adds documentation to the `no-upload` option
of the `cosign attest` command to clarify that when the option is
used, the produced attestation is written to STDOUT

Signed-off-by: Travis Truman <[email protected]>
@haydentherapper haydentherapper enabled auto-merge (squash) June 10, 2025 23:15
@haydentherapper
Copy link
Contributor

Sorry for taking awhile to review. Can you rebase against main, that'll pick up a fix for the failing test?

@haydentherapper haydentherapper disabled auto-merge June 12, 2025 23:17
@haydentherapper haydentherapper enabled auto-merge (squash) June 16, 2025 19:42
@haydentherapper haydentherapper merged commit 19ef59d into sigstore:main Jun 16, 2025
29 checks passed
@trumant trumant deleted the issue-4163 branch June 16, 2025 20:11
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Jun 18, 2025
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cosign](https://github.com/sigstore/cosign) | patch | `2.5.1` -> `2.5.2` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>sigstore/cosign (cosign)</summary>

### [`v2.5.2`](https://github.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v252)

[Compare Source](sigstore/cosign@v2.5.1...v2.5.2)

#### Bug Fixes

- Do not load trusted root when CT env key is set

#### Documentation

- docs: improve doc for --no-upload option ([#&#8203;4206](sigstore/cosign#4206))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC41OS4zIiwidXBkYXRlZEluVmVyIjoiNDAuNTkuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90Il19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

cosign attest does not save file locally

2 participants