feat(cli): support remote materials #908

Activity

1. jiparis

   added

   component/CLI

   component/backend

   on Jun 6, 2024
2. github-actions commented on Feb 23, 2026

   

   github-actionsBot

   on Feb 23, 2026 – with GitHub Actions

   Contributor

   More actions

   This issue is stale because it has been open for 60 days with no activity. It will be closed in 7 days if no further activity occurs.
3. github-actions

   added

   Stale

   on Feb 23, 2026
4. migmartri

   added

   good first issueGood for newcomersGood for newcomers

   pinnedprevent it from bein staledprevent it from bein staled

   and removed

   Stale

   on Feb 23, 2026
5. waveywaves commented on Apr 21, 2026

   

   waveywaves

   on Apr 21, 2026

   Contributor

   More actions

   This appears to be already implemented via the resourceloader package (PR #1861, Feb 2025).

   att add --value https://... works today:

   1. resourceloader.GetPathForResource(value) detects HTTP(S) URLs
   2. Downloads to a temp file via http.Get()
   3. Passes the local path to the existing crafter flow
   4. All 30+ material types supported automatically (SBOM, SARIF, JUnit, Helm, etc.)

   Also supports env://VAR_NAME for environment variable expansion.

   Relevant code: pkg/resourceloader/resourceloader.go and app/cli/cmd/attestation_add.go:99-110.

   @migmartri @jiparis — this can likely be closed. Let me know if there's a remaining gap I'm not seeing.
6. jiparis

   closed this as completedon Oct 20, 2026