tektoncd/pipeline

[TEP-0089] Enforce non-falsifiable provenance using SPIRE

开放

#6,597 创建于 2023年4月28日

 (2 条评论) (1 个反应) (0 位负责人)Go (1,943 个派生)auto 404
help wantedkind/featurekind/security

仓库指标

星标
 (9,013 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

This is a tracking bug for the implementation of TEP-0089.

TEP-0089 is a proposal to enforce non-falsifiable provenance using SPIRE.

The PRs created to implement this issue are

  • PR-5039 [TEP-0089] - Spire Package
  • PR-5647 [TEP-0089] Apis to handle SPIRE signing and verification.
  • PR-5676 [TEP-0089] Modify entrypoint to sign the results.
  • PR-5902 [TEP-0089] Add a config map to support SPIRE initialization.
  • PR-6524 [TEP-0089] SPIRE for non-falsifiable provenance - IsSpireEnabled
  • PR-6527 TEP-0089: Refactor setting of "enforce-nonfalsifiability" feature flag
  • PR-6539 [TEP-0089] Add CSI volumes to the Pods which provide the SPIRE workload API
  • PR-6553 [TEP-0089] SPIRE for non-falsifiable provenance. Setup the test environment
  • PR-6627 [TEP-0089] Inject SpireControllerAPIClient into the Taskrun controller and reconciler.
  • PR-6782 [TEP-0089] Enable the signing and verification of TR results and the TR status

贡献者指南