buildsec / frsca

https://buildsec.github.io/frsca

Apache License 2.0

225 stars 31 forks source link

Consume Kyverno resources stored as OCI artifacts #361

Open developer-guy opened 1 year ago

developer-guy commented 1 year ago

Feature Request

Kyverno project is started to upload its manifests to OCI registries as an OCI artifact with the help of the Flux CLI^1, thus, we can consume it from there instead of downloading them through the releases page.

Slack conversation: https://openssf.slack.com/archives/C03908MHUSE/p1666903088549279

Current Behavior

Downloading it from the source repository which is not supported in the further releases

Expected Behavior

Download the manifest files from the OCI registry.

Possible Solution or Alternative

We can use regctl to retrieve the manifests from the OCI registry.

Context

/cc @sudo-bmitch @chipzoller @eddycharly

sudo-bmitch commented 1 year ago

From the meeting today, there was mixed interest in using the Helm chart. Some like the configurability and others are concerned with added complexity.