From 3a42ef3514988977c11ba2fc154943d100504c15 Mon Sep 17 00:00:00 2001 From: Miguel Martinez Date: Tue, 10 Feb 2026 22:57:59 +0100 Subject: [PATCH 1/2] feat: replace contract sync workflow with direct CLI usage Replace the reusable workflow reference with inline steps that install the Chainloop CLI and apply contracts directly. Standardize contract file extensions to .yaml. Signed-off-by: Miguel Martinez --- ...codeql.yml => chainloop-vault-codeql.yaml} | 0 ....yml => chainloop-vault-helm-package.yaml} | 0 ...lease.yml => chainloop-vault-release.yaml} | 0 ...ds.yml => chainloop-vault-scorecards.yaml} | 0 .github/workflows/sync_contracts.yml | 27 ++++++++++++------- 5 files changed, 17 insertions(+), 10 deletions(-) rename .github/workflows/contracts/{chainloop-vault-codeql.yml => chainloop-vault-codeql.yaml} (100%) rename .github/workflows/contracts/{chainloop-vault-helm-package.yml => chainloop-vault-helm-package.yaml} (100%) rename .github/workflows/contracts/{chainloop-vault-release.yml => chainloop-vault-release.yaml} (100%) rename .github/workflows/contracts/{chainloop-vault-scorecards.yml => chainloop-vault-scorecards.yaml} (100%) diff --git a/.github/workflows/contracts/chainloop-vault-codeql.yml b/.github/workflows/contracts/chainloop-vault-codeql.yaml similarity index 100% rename from .github/workflows/contracts/chainloop-vault-codeql.yml rename to .github/workflows/contracts/chainloop-vault-codeql.yaml diff --git a/.github/workflows/contracts/chainloop-vault-helm-package.yml b/.github/workflows/contracts/chainloop-vault-helm-package.yaml similarity index 100% rename from .github/workflows/contracts/chainloop-vault-helm-package.yml rename to .github/workflows/contracts/chainloop-vault-helm-package.yaml diff --git a/.github/workflows/contracts/chainloop-vault-release.yml b/.github/workflows/contracts/chainloop-vault-release.yaml similarity index 100% rename from .github/workflows/contracts/chainloop-vault-release.yml rename to .github/workflows/contracts/chainloop-vault-release.yaml diff --git a/.github/workflows/contracts/chainloop-vault-scorecards.yml b/.github/workflows/contracts/chainloop-vault-scorecards.yaml similarity index 100% rename from .github/workflows/contracts/chainloop-vault-scorecards.yml rename to .github/workflows/contracts/chainloop-vault-scorecards.yaml diff --git a/.github/workflows/sync_contracts.yml b/.github/workflows/sync_contracts.yml index ab174e38f..426a68c35 100644 --- a/.github/workflows/sync_contracts.yml +++ b/.github/workflows/sync_contracts.yml @@ -1,13 +1,9 @@ -# This workflow uses actions that are not certified by GitHub. They are provided -# by a third-party and are governed by separate terms of service, privacy -# policy, and support documentation. - name: Sync Chainloop Workflow contracts on: push: - branches: [ "main" ] + branches: ["main"] paths: - - '.github/workflows/contracts/**' + - ".github/workflows/contracts/**" schedule: - cron: "0 0 * * *" # daily at midnight @@ -16,7 +12,18 @@ permissions: read-all jobs: chainloop_contract_sync: - name: Chainloop Contract Sync - uses: chainloop-dev/labs/.github/workflows/chainloop_contract_sync.yml@5344787a72876bd22e199b94c09a86532521b4b3 - secrets: - api_token: ${{ secrets.CHAINLOOP_TOKEN }} + name: "[chainloop] Chainloop Contract Sync" + runs-on: ubuntu-latest + env: + CHAINLOOP_TOKEN: ${{ secrets.CHAINLOOP_TOKEN }} + steps: + - name: Checkout repository + uses: actions/checkout@v4 + - name: Install Chainloop + run: | + curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --ee + - name: Update contract definitions + run: | + for file in .github/workflows/contracts/*.yaml; do + chainloop wf contract apply -f $file + done From f53d8511262be979ae39ea866ef60e1d4c152ecd Mon Sep 17 00:00:00 2001 From: Miguel Martinez Date: Wed, 11 Feb 2026 09:29:26 +0100 Subject: [PATCH 2/2] fix naming Signed-off-by: Miguel Martinez --- .github/workflows/sync_contracts.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/sync_contracts.yml b/.github/workflows/sync_contracts.yml index 426a68c35..e4090ec64 100644 --- a/.github/workflows/sync_contracts.yml +++ b/.github/workflows/sync_contracts.yml @@ -12,7 +12,7 @@ permissions: read-all jobs: chainloop_contract_sync: - name: "[chainloop] Chainloop Contract Sync" + name: "Chainloop Contract Sync" runs-on: ubuntu-latest env: CHAINLOOP_TOKEN: ${{ secrets.CHAINLOOP_TOKEN }} @@ -21,7 +21,7 @@ jobs: uses: actions/checkout@v4 - name: Install Chainloop run: | - curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s -- --ee + curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s - name: Update contract definitions run: | for file in .github/workflows/contracts/*.yaml; do