From b504b522bb1bbebb15307dc25b3db86dcfa1aff7 Mon Sep 17 00:00:00 2001
From: Miguel Martinez Trivino <miguel@chainloop.dev>
Date: Tue, 27 Oct 2026 21:33:38 +0100
Subject: [PATCH] chore(ci): stop linking the release attestation in release
 notes

The app.chainloop.dev attestation view is no longer public: workflow run
visibility is RBAC-only since public workflows were removed, so the link
only worked for members of the owning organization.

Assisted-by: Claude Code
Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>

Chainloop-Trace-Sessions: bcdd3961-59a4-4046-8705-dbe14cbf4d3b
---
 .github/workflows/release.yaml | 20 --------------------
 1 file changed, 20 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 711da901a..4d6a0c96f 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -256,26 +256,6 @@ jobs:
           echo "target_version=$TARGET_VERSION"
           chainloop project version update --project chainloop --name "$CURRENT_VERSION" --new-name "$TARGET_VERSION" || true
 
-      - name: Add attestation link to release notes
-        if: ${{ success() }}
-        env:
-          ATTESTATION_SHA: ${{ steps.attestation_push.outputs.attestation_sha }}
-          RELEASE_TAG: ${{ github.ref_name }}
-        run: |
-          chainloop_release_url="## Chainloop Attestation"$'\n'"[View the attestation of this release](https://app.chainloop.dev/attestation/${{ env.ATTESTATION_SHA }})"
-          current_notes=$(gh release view $RELEASE_TAG --json body -q '.body')
-
-          if echo "$current_notes" | grep -q "## Chainloop Attestation"; then
-            # Replace the existing Chainloop Attestation section with the new URL
-            modified_notes=$(echo "$current_notes" | sed -E "s|## Chainloop Attestation[^\n]*\n\[View the attestation of this release\]\(https://app\.chainloop\.dev/attestation/[^\)]*\)|$chainloop_release_url|")
-          else
-            # Add the Chainloop Attestation section to the top
-            modified_notes="$chainloop_release_url"$'\n\n'"$current_notes"
-          fi
-
-          # Update the release notes and ignore if it fails since we might be lacking permissions to update the release notes
-          gh release edit $RELEASE_TAG -n "$modified_notes" || echo -n "Not enough permissions to edit the release notes. Skipping..."
-
       - name: Mark attestation as failed
         if: ${{ failure() }}
         env: