Batuhan Apaydın comments

Results 338 comments of


                                            Batuhan Apaydın

chore(reproducibility): add buildid= and trimpath

seems everything is fine @wagoodman, thanks a ton 🙋🏻‍♂️

create an SBOM attestations using syft and attach them to container image using cosign

@Dentrax let's give it a try this one also, WDYT?

create an SBOM attestations using syft and attach them to container image using cosign

@luhring sorry for the mention but AFAIK, in order to attach attestation provided by syft attest command, we need one more command to be executed to attach it to the...

create an SBOM attestations using syft and attach them to container image using cosign

yep, we'll do that with @Dentrax ASAP

create an SBOM attestations using syft and attach them to container image using cosign

As you can see from the [link](https://github.com/anchore/syft/issues/990#issuecomment-1124197370), Syft has already added this support and will be released after the 0.45.0+ version, so, we should wait until that time.

GitLab Brew Tap Problem

@caarlos0 you can assign it to me, I can take care of that one.

[Proposal] add provenance document creation support based on in-toto attestations

maybe we can approach this issue from a different angle, we can use [slsa-provenance](https://github.com/philips-labs/slsa-provenance-action/blob/main/cmd/slsa-provenance/main.go) CLI from philips-labs to generate an SLSA provenance, then we can sign and attach it using...