fix: fetch full Rekor UUID instead of logIndex in wait-for-chains
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 6
- Forks
- 19
- Avg merge
- 12h 36m
- Merged PRs (30d)
- 27
Description
The wait-for-chains task extracts just the logIndex number from the Rekor transparency URL (e.g. 1732077376), but the draft release template expects the full hex entry UUID (e.g. 108e9186e8c5677a...).
This causes the draft release attestation section to contain a bare number instead of the proper UUID, making the rekor-cli get --uuid commands non-functional.
Fix: Fetch the actual UUID from the Rekor API, falling back to logIndex if the API call fails.
See tektoncd/pipeline#10203 for the pipeline fix.
/kind bug
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the wait-for-chains task and trace how it extracts the Rekor value from the transparency URL. Verify the Rekor API lookup and its fallback behavior; done means the draft release template receives the full entry UUID when available and the logIndex when the lookup fails.
Written by the indexing model from the issue text.
Assessment
- Domain
- release
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100