Roadmap 2023: Buildpack SBOMs, Provenance and Signatures

[ryanmoran]

As part of the 2023 roadmap, we want to take a look at how we can do a better job providing security and transparency for our build artifacts. Specifically, we want to find ways to provide easily consumable SBOMs, provenance data, and signatures for our buildpack, stack, and builder images.

Please use this discussion to provide thoughts, links to tools, or feedback.