sethvargo / ratchet

A tool for securing CI/CD workflows with version pinning.
Apache License 2.0
769 stars 32 forks source link

Concourse support #30

Open dannystaple opened 2 years ago

dannystaple commented 2 years ago

TL;DR

Concourse CI uses container images for resource types. Would it make sense to swap container references out for hashes too? It is also configured with YAML.

Detailed design

Concourse documentation on resource types: https://concourse-ci.org/resource-types.html

resource_types:
- name: rss
  type: registry-image
  source:
    repository: suhlig/concourse-rss-resource
    tag: latest


### Additional information

_No response_
sethvargo commented 2 years ago

Hi @dannystaple

Sure - I'm going to rely on community contributions for many of these CI systems (there's an ever-growing number). If you want to take a stab at adding support, I'll happily review it.