Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable SBOM and SLSA Provenance for Flux container images #3522

Closed
6 tasks done
Tracked by #3533
stefanprodan opened this issue Jan 27, 2023 · 0 comments
Closed
6 tasks done
Tracked by #3533

Enable SBOM and SLSA Provenance for Flux container images #3522

stefanprodan opened this issue Jan 27, 2023 · 0 comments
Labels
area/ci CI related issues and pull requests umbrella-issue Umbrella issue for tracking progress of a larger effort

Comments

@stefanprodan
Copy link
Member

stefanprodan commented Jan 27, 2023 •
edited
Loading

Recently buildkit has added support for generating SBOMs and SLSA Provenance. We can attach the SBOM and Provenance to our container images using the Docker GH Action.

Enable SBOM and SLSA Provenance for container images in:

  • source-controller
  • notification-controller
  • kustomize-controller
  • helm-controller
  • image-reflector-controller
  • image-automation-controller
@stefanprodan stefanprodan added area/ci CI related issues and pull requests umbrella-issue Umbrella issue for tracking progress of a larger effort labels Jan 27, 2023
This was referenced Jan 27, 2023
Merged
Merged
Merged
Merged
Merged
Merged
@stefanprodan stefanprodan mentioned this issue Jan 30, 2023
Closed
16 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/ci CI related issues and pull requests umbrella-issue Umbrella issue for tracking progress of a larger effort
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@stefanprodan