fix: add reviewer-related env vars to GitLab and Dagger ListEnvVars

Add CI_PROJECT_PATH, CI_JOB_TOKEN, and CI_MERGE_REQUEST_PROJECT_PATH
to the GitLab runner's ListEnvVars so they are resolved via
ResolveEnvVars and available in the envVars map for reviewer fetching.
Also add them to the Dagger runner for GitLab-in-Dagger contexts.

Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>

Author: jiparis

pkg/attestation/crafter/runners/daggerpipeline.go

@@ -68,6 +68,10 @@ func (r *DaggerPipeline) ListEnvVars() []*EnvVarDefinition {
 		{"CI_MERGE_REQUEST_SOURCE_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_TARGET_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_PROJECT_URL", true},
+		{"CI_MERGE_REQUEST_PROJECT_PATH", true},
+		{"CI_SERVER_URL", true},
+		{"CI_PROJECT_PATH", true},
+		{"CI_JOB_TOKEN", true},
 		{"GITLAB_USER_LOGIN", true},
 	}
 }

pkg/attestation/crafter/runners/daggerpipeline_test.go

@@ -78,6 +78,10 @@ func (s *daggerPipelineSuite) TestListEnvVars() {
 		{"CI_MERGE_REQUEST_SOURCE_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_TARGET_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_PROJECT_URL", true},
+		{"CI_MERGE_REQUEST_PROJECT_PATH", true},
+		{"CI_SERVER_URL", true},
+		{"CI_PROJECT_PATH", true},
+		{"CI_JOB_TOKEN", true},
 		{"GITLAB_USER_LOGIN", true},
 	}
 	assert.Equal(s.T(), expected, s.runner.ListEnvVars())

pkg/attestation/crafter/runners/gitlabpipeline.go

@@ -78,6 +78,8 @@ func (r *GitlabPipeline) ListEnvVars() []*EnvVarDefinition {
 		{"CI_RUNNER_VERSION", false},
 		{"CI_RUNNER_DESCRIPTION", true},
 		{"CI_COMMIT_REF_NAME", false},
+		{"CI_PROJECT_PATH", false},
+		{"CI_JOB_TOKEN", true},
 		// MR-specific variables (optional - only present in MR contexts)
 		{"CI_PIPELINE_SOURCE", true},
 		{"CI_MERGE_REQUEST_IID", true},
@@ -86,6 +88,7 @@ func (r *GitlabPipeline) ListEnvVars() []*EnvVarDefinition {
 		{"CI_MERGE_REQUEST_SOURCE_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_TARGET_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_PROJECT_URL", true},
+		{"CI_MERGE_REQUEST_PROJECT_PATH", true},
 	}
 }
 

pkg/attestation/crafter/runners/gitlabpipeline_test.go

@@ -1,5 +1,5 @@
 //
-// Copyright 2023-2025 The Chainloop Authors.
+// Copyright 2023-2026 The Chainloop Authors.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -91,13 +91,16 @@ func (s *gitlabPipelineSuite) TestListEnvVars() {
 		{"CI_RUNNER_VERSION", false},
 		{"CI_RUNNER_DESCRIPTION", true},
 		{"CI_COMMIT_REF_NAME", false},
+		{"CI_PROJECT_PATH", false},
+		{"CI_JOB_TOKEN", true},
 		{"CI_PIPELINE_SOURCE", true},
 		{"CI_MERGE_REQUEST_IID", true},
 		{"CI_MERGE_REQUEST_TITLE", true},
 		{"CI_MERGE_REQUEST_DESCRIPTION", true},
 		{"CI_MERGE_REQUEST_SOURCE_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_TARGET_BRANCH_NAME", true},
 		{"CI_MERGE_REQUEST_PROJECT_URL", true},
+		{"CI_MERGE_REQUEST_PROJECT_PATH", true},
 	}, s.runner.ListEnvVars())
 }
 
@@ -115,13 +118,16 @@ func (s *gitlabPipelineSuite) TestResolveEnvVars() {
 		"CI_RUNNER_DESCRIPTION":               "chainloop-runner",
 		"CI_COMMIT_REF_NAME":                  "main",
 		"CI_SERVER_URL":                       "https://gitlab.com",
+		"CI_PROJECT_PATH":                     "chainloop/chainloop",
+		"CI_JOB_TOKEN":                        "gitlab-job-token",
 		"CI_PIPELINE_SOURCE":                  "merge_request_event",
 		"CI_MERGE_REQUEST_IID":                "42",
 		"CI_MERGE_REQUEST_TITLE":              "Add new feature",
 		"CI_MERGE_REQUEST_DESCRIPTION":        "Implements awesome feature",
 		"CI_MERGE_REQUEST_SOURCE_BRANCH_NAME": "feature/awesome",
 		"CI_MERGE_REQUEST_TARGET_BRANCH_NAME": "main",
 		"CI_MERGE_REQUEST_PROJECT_URL":        "https://gitlab.com/chainloop/chainloop/-/merge_requests/42",
+		"CI_MERGE_REQUEST_PROJECT_PATH":       "chainloop/chainloop",
 	}, resolvedEnvVars)
 }
 
@@ -135,6 +141,8 @@ func (s *gitlabPipelineSuite) TestResolveEnvVarsWithoutRunnerDescription() {
 	s.T().Setenv("CI_MERGE_REQUEST_SOURCE_BRANCH_NAME", "")
 	s.T().Setenv("CI_MERGE_REQUEST_TARGET_BRANCH_NAME", "")
 	s.T().Setenv("CI_MERGE_REQUEST_PROJECT_URL", "")
+	s.T().Setenv("CI_MERGE_REQUEST_PROJECT_PATH", "")
+	s.T().Setenv("CI_JOB_TOKEN", "")
 
 	resolvedEnvVars, errors := s.runner.ResolveEnvVars()
 	s.Empty(errors, "Should not error when optional variables are missing")
@@ -149,6 +157,7 @@ func (s *gitlabPipelineSuite) TestResolveEnvVarsWithoutRunnerDescription() {
 		"CI_RUNNER_VERSION":  "13.10.0",
 		"CI_COMMIT_REF_NAME": "main",
 		"CI_SERVER_URL":      "https://gitlab.com",
+		"CI_PROJECT_PATH":    "chainloop/chainloop",
 	}
 	s.Equal(expected, resolvedEnvVars)
 }
@@ -184,6 +193,9 @@ func (s *gitlabPipelineSuite) SetupTest() {
 	t.Setenv("CI_MERGE_REQUEST_SOURCE_BRANCH_NAME", "feature/awesome")
 	t.Setenv("CI_MERGE_REQUEST_TARGET_BRANCH_NAME", "main")
 	t.Setenv("CI_MERGE_REQUEST_PROJECT_URL", "https://gitlab.com/chainloop/chainloop/-/merge_requests/42")
+	t.Setenv("CI_PROJECT_PATH", "chainloop/chainloop")
+	t.Setenv("CI_JOB_TOKEN", "gitlab-job-token")
+	t.Setenv("CI_MERGE_REQUEST_PROJECT_PATH", "chainloop/chainloop")
 }
 
 // Run the tests