Dennis Leon

#### What this PR does / why we need it: bug fix when kapp deploy fails. Continue to write out the app metadata file with the latest state change. (Instead...

Sign images built

1

**Describe the problem/challenge you have** Having the ability to authenticate the entity that created the container image is a good security practice to prevent malicious / unexpected images to be...

[perf] imgpkg seems to make lots of repeated requests to `/v2` endpoint

4

# Description running `imgpkg pull --debug` I notice lots of requests being made to the registry `/v2` endpoint, trying to get a token. When pulling a bundle with lots of...

Provide a way to easily update nested bundles

4

# **Describe the problem/challenge you have** an imgpkg bundle with referenced nested bundles can be generalized as a directed acyclic graph. Updating any node in this graph, requires also updating...

how to create a sbom for a Bundle

2

I would like to have insight into what dependencies (+ transitive) / packages / libraries / licenses are being distributed by a Bundle Having an sbom is a good standard...

Document promoting a bundle use case

1

Describe the problem/challenge you have I wanted to know how to use imgpkg when promoting a bundle between various environments (dev->qa->prod). And have a deeper understanding on how `imgpkg pull`...

**What steps did you take:** ``` > /d/a/carvel-imgpkg/carvel-imgpkg/src/github.com/vmware-tanzu/carvel-imgpkg/imgpkg.exe push -f test/e2e/assets/bundle_file_permissions -b ttl.sh/test-windows-push > docker pull ttl.sh/test-windows-push Using default tag: latest latest: Pulling from test-windows-push 2021be6dac15: Pulling fs layer 2021be6dac15:...

Worked with @seemiller we have identified the following areas of improvement to help folk onboard and make contributions to imgpkg: - [x] ui vs logger -> hard to make changes...

**What steps did you take:** On Windows ``` git clone https://github.com/vmware-tanzu/carvel-imgpkg cd carvel-imgpkg imgpkg push -f ./test/assets/bundle_file_permissions -b some-image imgpkg pull -b some-image -o ./extract-bundle ``` Expected ./extract-bundle/exec_file.sh to have...

**What steps did you take:** On Windows ``` > git clone https://github.com/vmware-tanzu/carvel-imgpkg > cd carvel-imgpkg > imgpkg push -i image-windows -f test/e2e/assets/simple-app --yes Succeded pushing sha sha256:73e65af5e889da98ece0bd471b2cd83baac574e19943108212ba0417ff8f03c2 ``` On Linux...