chainloop/buf.yaml at main · chainloop-dev/chainloop · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
version: v2
modules:
  - path: app/artifact-cas/api
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
      disallow_comment_ignores: true
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
  - path: app/artifact-cas/internal/conf
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
      ignore_only:
        PACKAGE_DEFINED:
          - app/artifact-cas/internal/conf/conf.proto
      disallow_comment_ignores: true
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
      ignore_only:
        FIELD_NO_DELETE:
          - app/artifact-cas/internal/conf/conf.proto
  - path: app/controlplane/api
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
      ignore_only:
        ENUM_VALUE_PREFIX:
          - app/controlplane/api/workflowcontract/v1/crafting_schema.proto
        ENUM_ZERO_VALUE_SUFFIX:
          - app/controlplane/api/controlplane/v1/pagination.proto
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
      ignore_only:
        # Deprecated `attestation` and `bundle` fields were removed in favor of `attestation_bundle`;
        # their tag numbers and names are `reserved` in the proto to prevent accidental reuse.
        # The `public` workflow attribute and the public shared referrer index were removed;
        # their tag numbers/names are `reserved` and the DiscoverPublicShared RPC + messages deleted.
        FIELD_NO_DELETE:
          - app/controlplane/api/controlplane/v1/workflow_run.proto
          - app/controlplane/api/controlplane/v1/workflow.proto
          - app/controlplane/api/controlplane/v1/referrer.proto
        # The RobotAccountService was removed entirely (CP-N4): robot accounts are superseded by
        # workflow-scoped API tokens, creation had no caller after 2024, and the policy gating it
        # was grantable to API tokens. Existing robot-account JWTs are still honored at attestation
        # time, but the management API (Create/List/Revoke) is gone.
        FILE_NO_DELETE:
          - app/controlplane/api/controlplane/v1/robot_accounts.proto
        RPC_NO_DELETE:
          - app/controlplane/api/controlplane/v1/referrer.proto
        MESSAGE_NO_DELETE:
          - app/controlplane/api/controlplane/v1/referrer.proto
  - path: app/controlplane/internal/conf
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
      ignore_only:
        PACKAGE_DEFINED:
          - app/controlplane/internal/conf/conf.proto
      disallow_comment_ignores: true
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
      ignore_only:
        # The referrer_shared_index config field + ReferrerSharedIndex message were removed
        # together with the public shared referrer index feature.
        FIELD_NO_DELETE:
          - app/controlplane/internal/conf/controlplane/config/v1/conf.proto
        MESSAGE_NO_DELETE:
          - app/controlplane/internal/conf/controlplane/config/v1/conf.proto
  - path: app/controlplane/pkg/conf
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
      disallow_comment_ignores: true
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
  - path: app/controlplane/plugins/sdk/v1/plugin/api
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
      ignore_only:
        PACKAGE_DIRECTORY_MATCH:
          - app/controlplane/plugins/sdk/v1/plugin/api/fanout.proto
        PACKAGE_VERSION_SUFFIX:
          - app/controlplane/plugins/sdk/v1/plugin/api/fanout.proto
      disallow_comment_ignores: true
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
  - path: pkg/attestation/crafter/api
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
        - ENUM_VALUE_UPPER_SNAKE_CASE
        - ENUM_VALUE_PREFIX
        - ENUM_ZERO_VALUE_SUFFIX
      disallow_comment_ignores: true
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
  - path: pkg/credentials/api
    lint:
      use:
        - STANDARD
      except:
        - FIELD_NOT_REQUIRED
        - PACKAGE_NO_IMPORT_CYCLE
      disallow_comment_ignores: true
    breaking:
      use:
        - FILE
      except:
        - EXTENSION_NO_DELETE
        - FIELD_SAME_DEFAULT
deps:
  - buf.build/bufbuild/protovalidate:v1.1.0
  - buf.build/googleapis/googleapis:4ed3bc159a8b4ac68fe253218760d035 # gitleaks:allow
  - buf.build/grpc-ecosystem/grpc-gateway:v2.26.3
  - buf.build/kratos-go/kratos:e1d52e944e3845c6862a566db322432d