Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

publish a SLSA provenance with pipeline #170

Open
bjwswang opened this issue Jul 27, 2023 · 1 comment
Open

publish a SLSA provenance with pipeline #170

bjwswang opened this issue Jul 27, 2023 · 1 comment
Assignees
@bjwswang
Labels
difficulty-hard The amount of changes and the details involved in the changes require a deep understanding of the pr enhancement New feature or request low-code related to low code engine priority-high
Milestone
v0.2.0-beta

Comments

@bjwswang
Copy link
Collaborator

bjwswang commented Jul 27, 2023 •
edited
Loading

Investiate slsa provenance generation https://slsa.dev/provenance/v1
@bjwswang bjwswang added the enhancement New feature or request label Jul 27, 2023
@bjwswang bjwswang self-assigned this Jul 28, 2023
@bjwswang bjwswang added this to the v0.2.0 milestone Aug 10, 2023
@bjwswang bjwswang added priority-high difficulty-hard The amount of changes and the details involved in the changes require a deep understanding of the pr rating labels Aug 14, 2023
@bjwswang
Copy link
Collaborator Author

bjwswang commented Aug 14, 2023 •
edited
Loading

  1. Tekton chains https://tekton.dev/blog/2023/04/19/getting-to-slsa-level-2-with-tekton-and-tekton-chains/
  2. slsa framework verifier https://github.com/slsa-framework/slsa-verifier
  3. https://helm.sh/docs/topics/provenance/

@bjwswang bjwswang changed the title publish a SLSA provenance in Rating publish a SLSA provenance with pipeline Aug 14, 2023
@bjwswang bjwswang added low-code related to low code engine and removed rating labels Aug 25, 2023
@bjwswang bjwswang modified the milestones: v0.2.0, v0.2.0-beta Aug 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bjwswang bjwswang

Labels
difficulty-hard The amount of changes and the details involved in the changes require a deep understanding of the pr enhancement New feature or request low-code related to low code engine priority-high
Projects
None yet
Milestone
v0.2.0-beta
Development

No branches or pull requests
1 participant
@bjwswang