Sign image and attach SBOM attestion

opendevstack / ods-pipeline-image

ODS Pipeline tasks for container image packaging

Apache License 2.0

0 stars 0 forks source link

Sign image and attach SBOM attestion #12

Closed michaelsauter closed 10 months ago

michaelsauter commented 10 months ago

Closes #11.

michaelsauter commented 10 months ago

Awesome, thanks for the feedback. I basically agree to all your mentioned points. However, they all can be added later on without breaking the current behaviour. Therefore I am going to merge this now, and when the need arises we can build on top of it.