search

tektoncd / chains

Supply Chain Security in Tekton Pipelines
Apache License 2.0
248 stars 133 forks source link

Archivista Backend #1165

Open colek42 opened 3 months ago

colek42 commented 3 months ago

Feature request

Archivista is a open source CNCF project under the in-toto organization. It is a attestation store and query service.

Use case

Tekton Chains would implement the Archivista API to store attestations. This would allow Archivista and Witness users to leverage Tekton Chain within their workflows.

lcarva commented 3 months ago

Chains already supports various storage backends. Adding support for Archivista makes sense to me. Relevant code: https://github.com/tektoncd/chains/tree/main/pkg/chains/storage