Skip to main content

valint_discard

valint discard

Discard evidence

Synopsis

Discard evidence

valint discard [TARGET] [flags]

Optional flags

Flags for discard subcommand

ShortLongDescriptionDefault
--currentDiscard evidence attached to the current context
-h--helphelp for discard
--interactiveForce interactive mode for the discard list
--refEvidence store refrence
--silentAutomatically accept the discard list
--storeSelect evidence store

Global options flags

Flags for all valint subcommands

ShortLongDescriptionDefault
--cache-enableEnable local cachetrue
-c--configConfiguration file path
-C--context-typeCI context type, options=[jenkins github circleci azure gitlab travis tekton bitbucket local admission]
--deliverableMark as deliverable, options=[true, false]
-e--envEnvironment keys to include in evidence
-G--gatePolicy Gate name
-L--labelAdd Custom labels
--levelLog depth level, options=[panic fatal error warning info debug trace]
--log-contextAttach context to all logs
--log-fileOutput log to file
-d--output-directoryOutput directory path"${XDG_CACHE_HOME}/valint"
-O--output-fileOutput file name
-p--pipeline-namePipeline name
--predicate-typeCustom Predicate type (generic evidence format)"http://scribesecurity.com/evidence/generic/v0.1"
-n--product-keyProduct Key
-V--product-versionProduct Version
-q--quietSuppress all logging output
-U--scribe.client-idScribe Client ID (deprecated)
-P--scribe.client-secretScribe Client Token
-D--scribe.disableDisable scribe client
-E--scribe.enableEnable scribe client (deprecated)
-u--scribe.urlScribe API Url"https://api.scribesecurity.com"
-s--showPrint evidence to stdout
--structuredEnable structured logger
--timeoutTimeout duration"120s"
-v--verboseLog verbosity level [-v,--verbose=1] = info, [-vv,--verbose=2] = debug

Examples for running valint discard

  valint discard <target>

<target> Target object name format=[<image:tag>, <dir path>, <git url>]

valint discard discard all evidence in local context
valint discard --context-type github discard all evidence in pipeline
valint discard alpine:latest discard all evidence for Docker image
valint discard alpine:latest --silent silently discard evidence
valint discard alpine:latest --interactive ask user before discarding evidence
valint discard alpine:latest --product-key my_product discard all evidence in product
valint discard alpine:latest -vv --product-key my_product --product-version v0.0.1 discard all evidence in product version
valint discard alpine:latest --context-type github discard all evidence for Docker images generated by the current pipeline
valint discard alpine:latest -vv show verbose debug information

Supports the following image sources:
valint discard yourrepo/yourimage:tag defaults to using images from a Docker daemon. If Docker is not present, the image is pulled directly from the registry.

You can also explicitly specify the scheme to use:
valint discard docker:yourrepo/yourimage:tag explicitly use the Docker daemon
valint discard docker-archive:path/to/yourimage.tar use a tarball from disk for archives created from "docker save"
valint discard oci-archive:path/to/yourimage.tar use a tarball from disk for OCI archives (from Skopeo or otherwise)
valint discard dir:path/to/yourproject read directly from a path on disk (any directory)
valint discard registry:yourrepo/yourimage:tag pull image directly from a registry (no container runtime required)
valint discard file:path/to/yourproject/file read directly from a path on disk (any single file)

SEE ALSO

  • valint - Validate Supply Chain Integrity