tektoncd / tektoncd/pruner

fix: fetch full Rekor UUID instead of logIndex in wait-for-chains

Open Beginner friendly
#312 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

kind/bug
Dominant language
Go
Stars
6
Forks
19
Avg merge
12h 36m
Merged PRs (30d)
27

Description

The wait-for-chains task extracts just the logIndex number from the Rekor transparency URL (e.g. 1732077376), but the draft release template expects the full hex entry UUID (e.g. 108e9186e8c5677a...).

This causes the draft release attestation section to contain a bare number instead of the proper UUID, making the rekor-cli get --uuid commands non-functional.

Fix: Fetch the actual UUID from the Rekor API, falling back to logIndex if the API call fails.

See tektoncd/pipeline#10203 for the pipeline fix.

/kind bug

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the wait-for-chains task and trace how it extracts the Rekor value from the transparency URL. Verify the Rekor API lookup and its fallback behavior; done means the draft release template receives the full entry UUID when available and the logIndex when the lookup fails.

Written by the indexing model from the issue text.

Assessment

Domain
release
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.