Flow Template - Kosli Documentation

A flow template defines what attestations are required for a trail and its artifacts to be compliant. You pass the template file when creating or updating a flow with kosli create flow --template-file.

Specification

integer

required

The version of the specification schema. Currently only 1 is supported.

object

The trail specification. Defines what must be attested at the trail level and what artifacts are expected.

Show trail properties

array

Attestations required at the trail level for it to be compliant.

Show attestation properties

string

required

A unique name for the attestation within this template.

string

required

The attestation type. One of: generic, jira, junit, pull_request, snyk, sonar, decision, sbom, custom:<custom-type-name> for custom attestation types, or * to match any type.

array

Artifacts expected to be produced in the trail. Each artifact can have its own attestation requirements.

Show artifact properties

string

required

A reference name for the artifact (e.g. frontend-app, backend).

array

Attestations required for this artifact to be compliant.

Show attestation properties

string

required

A unique name for the attestation within this artifact.

string

required

The attestation type. One of: generic, jira, junit, pull_request, snyk, sonar, decision, sbom, custom:<custom-type-name> for custom attestation types, or * to match any type.

Example

Add the $schema comment to get editor validation and autocomplete:

# yaml-language-server: $schema=https://docs.kosli.com/schemas/flow-template/v1.json
version: 1
trail:
  attestations:
  - name: jira-ticket
    type: jira
  - name: risk-level-assessment
    type: generic
  artifacts:
  - name: backend
    attestations:
    - name: unit-tests
      type: junit
    - name: security-scan
      type: snyk
  - name: frontend
    attestations:
    - name: manual-ui-test
      type: generic
    - name: coverage-metrics
      type: custom:coverage-metrics

Using the template

Pass the template file when creating or updating a flow:

kosli create flow my-flow --template-file ./flow-template.yml

Once the flow exists, start a trail with kosli begin trail and record attestations using the kosli attest commands. Kosli evaluates trail compliance against the template automatically.

Trail-level attestations apply to the entire trail. Artifact-level attestations apply to a specific artifact produced within the trail.

Editor validation

A JSON Schema is available for the flow template format. Add the following comment to the top of your template file to enable inline validation and autocomplete in VS Code (requires the YAML extension) and other schema-aware editors:

# yaml-language-server: $schema=https://docs.kosli.com/schemas/flow-template/v1.json

​Specification

​Example

​Using the template

​Editor validation

Specification

Example

Using the template

Editor validation