tektoncd / chains

Supply Chain Security in Tekton Pipelines
Apache License 2.0
245 stars 126 forks source link

Promote SLSAv1.0 offering of Chains format to `beta` #1160

Open chitrangpatel opened 1 month ago

chitrangpatel commented 1 month ago

This was discussed at the Chains WG on July 18th. Since SLSAv1.0 was released, Chains provided support for it starting with provenance format slsa/v2alpha2. At this point, it is slsa/v2alpha4 (which includes support for StepActions and StepResults).

We propose stabilizing this to a Beta version: v2beta1 so that there is reduced immediate breaking changes and our users can adopt it more.

Here, I highlight some missing items:

chitrangpatel commented 1 month ago

cc @lcarva @renzodavid9

chitrangpatel commented 1 month ago

@renzodavid9 please add any other items here that I may have missed.

renzodavid9 commented 1 month ago

With https://github.com/tektoncd/pipeline/pull/8106 merged we can implement last point from https://github.com/tektoncd/chains/issues/1160#issue-2417114302, I'll take a look an open a PR for it

PuneetPunamiya commented 1 month ago

@chitrangpatel @renzodavid9 I'll work on this part