-
Recently found out about (thanks @dlorenc!):
https://github.com/chainguard-dev/apko
https://github.com/chainguard-dev/melange
Which provide a toolchain to build fully composable OCI images out of…
-
It will be usefull to have rule to generate predicate for consuming at [attest](https://github.com/bazel-contrib/rules_oci/blob/main/cosign/private/attest.bzl) rule.
https://github.com/chainguard-dev…
-
@jeffmendoza ran a quick Allstar operations overview for the other @ossf/scorecard-admins (Steering) members and I want to make sure we capture some of the content and potential follow-ups as an issue…
-
### Is your feature request related to a problem? Please describe.
https://github.com/cncf/toc/blob/main/process/README.md#project-graduation-process-sandbox-to-incubating
### Describe the solut…
-
I'm trying to get started with `rules_apko` and I'm failing to produce the `apko.lock.json` file. I have this, which I've copied from the examples:
```$ cat ./bazel/apko/base_images/wolfi/apko.yaml…
-
We ran into this with bash-dev which has:
```
curl -sL https://packages.wolfi.dev/os/aarch64/bash-dev-5.2.21-r1.apk | tar -Oxz usr/lib/pkgconfig/bash.pc | grep Version
Version: 5.2-release
```
…
-
### Which image/versions are related to this issue/feature request?
cgr.dev/chainguard/bash
### Issue/Feature description
I'd expect this to work:
```
$ docker run cgr.dev/chainguard/bash…
-
Add support for build-time SBOM generation by integrating the go parser from opensbom
https://github.com/chainguard-dev/melange/issues/137#tasklist-block-f9e67421-5b10-42b6-b2ab-2662ecfef34b
-
### Which image/versions are related to this issue/feature request?
docker pull, bazel rules_oci pull, and curl to appropriate blob URL fail.
bazel and curl report 503 Service Unavailable
### Iss…
-
### Which image/versions are related to this issue/feature request?
```
cgr.dev/chainguard/graalvm-native
```
### Issue/Feature description
Previously, my final image for https://github.com/koran…