Batuhan Apaydın
Batuhan Apaydın
based on the recent news that Chainguard contributes Rekor Search UI project to Sigstore, we might reconsider using this address in one of the Tekton Chains annotations about the transparency...
kindly ping @souleb @stefanprodan ☝️
kindly ping, I can take care of this one, I think, it will be resolved once we upgrade cosign dep on Flux side.
I'm super excited about this!
I can do it @cpanato, if you let me to do that 🫡
another thing that we need to solve is supporting draft releases in SLSA 3 Generic Generator because, at the moment of time, we are going to have two same releases...
We are willing to work on this, and you can assign it to one of us ☝️
We did the same effort in Flux v2, you can take a look at the following issue 👇 https://github.com/fluxcd/source-controller/issues/863 /cc @stefanprodan @dentrax
I think we can do the same thing for crossplane CLI also by providing an oppurtunity to sign and verify the providers stored in OCI images. /cc @turkenh
count me in 🙈