Provenance attestations for images

coder / internal

Non-community issues related to coder/coder

2 stars 0 forks source link

Provenance attestations for images #88

Open matifali opened 2 months ago

matifali commented 2 months ago

Add provenance to coder/coder images. This is a requirement to comply with https://securityscorecards.dev in the context of coder/coder#14879.

matifali commented 1 month ago

I started experimenting with this in https://github.com/coder/coder/pull/14999, but getting:

ERROR: Attestation is not supported for the docker driver.
Switch to a different driver, or turn on the containerd image store, and try again.
Learn more at https://docs.docker.com/go/attestations/

Will come back to it sometimes later.

Any ideas? @deansheather, @coadler