GitLab Support

[Dentrax]

We (@developer-guy) want to use this project in GitLab, so we thought we can implement go-gitlab client in this project.

• Pipeline API: https://docs.gitlab.com/ee/api/pipelines.html
• Runners API: https://docs.gitlab.com/ee/api/runners.html

If it make sense we want to get to it!

[Dentrax]

Ping @marcofranssen 🤞 Is this project specially created for GitHub? Does it make sense to add a new gitlab subcommand to generate provenance?

[marcofranssen]

If I can find some time I can refactor the binary into a new repo where we could add that feature and keep this repo solely for the github action wrapping part.

That would allow us to add the Gitlab features to the binary, while keeping the GitHub actions part here isolated.

[Dentrax]

Thanks! We (@developer-guy) can give a hand on this. Also can't wait to generate provenance on GitLab. Maybe you can create a fresh repository on this org and we can start implementation, filing issues, moving core stuff from this project, etc.

I also want to share this idea and project with GitLab Sec Team to get some feedback about the provenance we want to create or how it should be.

[marcofranssen]

@Dentrax feel free to continue on this repo, I will create a new one for the GH action part and then afterwards rename this repository to maintain all the history on our binary evolution.

[developer-guy]

We (w/@Dentrax) came across a tweet¹ by @SantiagoTorres, thanks to him for bringing this to our attention.

Footnotes

1. https://twitter.com/torresariass/status/1541459187707908096?s=20&t=TLA9wXCu6zZMkGjLRWBvbA ↩