Open
Description
Value Prop
We are adding new capabilities to manage artifact attestations more effectively:
- Delete attestations: Easily delete artifact attestations through the UI or API to remove unwanted attestations, such as those linked to malicious or vulnerable artifacts.
- Bulk operations: Use API endpoints to perform bulk actions on attestations, saving time when managing multiple attestations.
- Advanced filtering: Quickly locate the attestations you need by filtering by predicate type, subject name or creation date.
- Interactive list view: The attestations list view (
<repository>/attestations
) will become more interactive. You will be able to select one or multiple attestations to perform bulk actions, such as downloading or deleting. Additionally, you will be able to sort attestations by oldest or newest creation date.
Expected Outcome
Today, users can publish attestations, but once they're published, they have limited controls over them. They cannot delete existing attestations, even if they were created by accident. There is no built-in mechanism to expire attestations, which means they remain active indefinitely. To address this, we want to introduce lifecycle management capabilities that enable users to control the status and EOL of their attestations, including the ability to manage them in bulk.
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
Q2 2025 – Apr-Jun