buildsec / frsca

https://buildsec.github.io/frsca
Apache License 2.0
225 stars 31 forks source link

Configure pipeline run attestations #427

Closed sudo-bmitch closed 1 year ago

sudo-bmitch commented 1 year ago

This fixes a warning thrown by tkn chain payload because it's looking for pipelinerun attestations. Those default to x509 which we don't use in FRSCA, so the command warns that it cannot locate the x509 key. This change sets up the pipelinerun attestations to use the same settings as the taskrun attestations. Docs for the options can be found at https://tekton.dev/docs/chains/config/#pipelinerun-configuration