chainguard-images / actions

GitHub actions for the chainguard-images
Apache License 2.0
16 stars 21 forks source link

[apko-publish] Add SBOM attestations to images. #60

Closed wlynch closed 1 year ago

wlynch commented 1 year ago

This adds signed SBOM attestations for images produced with apko-publish.

See https://github.com/sigstore/cosign/blob/main/doc/cosign_attest.md for cosign attest documentation.

jdolitsky commented 1 year ago

closing as old/inactive. please re-open if necessary