philips-software / philips-software/amp-devcontainer
Automate clean-up of Attestations
Open
@rjaegers is already working on this.
Since Mar 13, 2026.
- Dominant language
- Shell
- Stars
- 135
- Forks
- 8
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 28
Description
Current situation
Currently all generated attestations are kept indefinite, even when the resources that they point to are cleaned up.
Required situation
Extend the current clean up process to automatically clean up attestations. Keeping only the ones that point to active release or edge builds, as is specified in the acceptance criteria below.
Acceptance criteria
- Attestations that don't point to a valid resource are cleaned up
- Attestations from release branches are kept indefinite
- Attestations for open pull requests are kept
- Attestations for the last build on the default branch (tagged as
edge) are kept
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.