tektoncd/dashboard v0.57.1

Tekton Dashboard v0.57.1 LTS

on GitHub

The Rekor UUID for this release is 108e9186e8c5677a23abc2424ea4e7e3499a860b8d23e40c23430e86ac2ec4d24bc13f8e1595836f

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.57.1/release.yaml
REKOR_UUID=108e9186e8c5677a23abc2424ea4e7e3499a860b8d23e40c23430e86ac2ec4d24bc13f8e1595836f

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("ghcr.io"))|.name + ":v0.57.1@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi