tektoncd/pipeline
[TEP-0089] Enforce non-falsifiable provenance using SPIRE
Aperta
#6597 aperta il 28 apr 2023
help wantedkind/featurekind/security
Metriche repository
- Star
- (9013 stelle)
- Metriche merge PR
- (Metriche PR in attesa)
Descrizione
This is a tracking bug for the implementation of TEP-0089.
TEP-0089 is a proposal to enforce non-falsifiable provenance using SPIRE.
The PRs created to implement this issue are
- PR-5039 [TEP-0089] - Spire Package
- PR-5647 [TEP-0089] Apis to handle SPIRE signing and verification.
- PR-5676 [TEP-0089] Modify entrypoint to sign the results.
- PR-5902 [TEP-0089] Add a config map to support SPIRE initialization.
- PR-6524 [TEP-0089] SPIRE for non-falsifiable provenance - IsSpireEnabled
- PR-6527 TEP-0089: Refactor setting of "enforce-nonfalsifiability" feature flag
- PR-6539 [TEP-0089] Add CSI volumes to the Pods which provide the SPIRE workload API
- PR-6553 [TEP-0089] SPIRE for non-falsifiable provenance. Setup the test environment
- PR-6627 [TEP-0089] Inject SpireControllerAPIClient into the Taskrun controller and reconciler.
- PR-6782 [TEP-0089] Enable the signing and verification of TR results and the TR status