Open chitrangpatel opened 1 month ago
cc @lcarva @renzodavid9
@renzodavid9 please add any other items here that I may have missed.
With https://github.com/tektoncd/pipeline/pull/8106 merged we can implement last point from https://github.com/tektoncd/chains/issues/1160#issue-2417114302, I'll take a look an open a PR for it
@chitrangpatel @renzodavid9 I'll work on this part
This was discussed at the Chains WG on July 18th. Since SLSAv1.0 was released, Chains provided support for it starting with provenance format
slsa/v2alpha2
. At this point, it isslsa/v2alpha4
(which includes support for StepActions and StepResults).We propose stabilizing this to a Beta version:
v2beta1
so that there is reduced immediate breaking changes and our users can adopt it more.Here, I highlight some missing items: