-
Repo: https://github.com/slsa-framework/example-package/tree/branch1
Run: https://github.com/slsa-framework/example-package/actions/runs/8856848703
Workflow file: https://github.com/slsa-framework/exa…
-
### Feature request
We (w/@dentrax @erkanzileli) propose generating SBOMs once the images are built when Taskrun has been completed, then signing them. I want to list the tools that can help us to …
-
This proposal is for a feature that is a bit beyond the current scope of Allstar currently. Please chime in if you would like to see this in Allstar.
## Problem: Secure code review (branch protecti…
-
CVE-2023-37264 references [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline), which may be a Go module.
Description:
Tekton Pipelines project provides k8s-style resources for declar…
-
`2.2 SBOM creation is automated and reproducible` means the SBOM must be reproducible, a good requirement for lvl2 and lvl3.
`2.7 SBOM is timestamped` requires a timestamp for every level.
Timest…
-
Repo: https://github.com/slsa-framework/example-package/tree/main
Run: https://github.com/slsa-framework/example-package/actions/runs/8841732715
Workflow file: https://github.com/slsa-framework/exampl…
-
The github provenance attestations (e.g. from the [attest-build-provenance action](https://github.com/actions/attest-build-provenance)) are uploaded to the container registry as well (following the [C…
-
https://github.com/lindell/multi-gitter
https://github.com/suzuki-shunsuke/ghatm
orgs: https://github.com/settings/organizations
- [x] szksh-lab https://github.com/search?q=is%3Apr%20org%3Aszks…
-
# Issue Description
This is to provide feedback on the Request Workflow Redesign, which is currently in Beta (https://openbuildservice.org/2022/08/15/request-workflow-redesign).
As a Release Manag…
-
Repo: https://github.com/slsa-framework/example-package/tree/v47.0.283
Run: https://github.com/slsa-framework/example-package/actions/runs/8805068557
Workflow file: https://github.com/slsa-framework/e…