help wantedkind/featurekind/security
仓库指标
- 星标
- (9,013 个星标)
- PR 合并指标
- (PR 指标待抓取)
描述
This is a tracking bug for the implementation of TEP-0089.
TEP-0089 is a proposal to enforce non-falsifiable provenance using SPIRE.
The PRs created to implement this issue are
- PR-5039 [TEP-0089] - Spire Package
- PR-5647 [TEP-0089] Apis to handle SPIRE signing and verification.
- PR-5676 [TEP-0089] Modify entrypoint to sign the results.
- PR-5902 [TEP-0089] Add a config map to support SPIRE initialization.
- PR-6524 [TEP-0089] SPIRE for non-falsifiable provenance - IsSpireEnabled
- PR-6527 TEP-0089: Refactor setting of "enforce-nonfalsifiability" feature flag
- PR-6539 [TEP-0089] Add CSI volumes to the Pods which provide the SPIRE workload API
- PR-6553 [TEP-0089] SPIRE for non-falsifiable provenance. Setup the test environment
- PR-6627 [TEP-0089] Inject SpireControllerAPIClient into the Taskrun controller and reconciler.
- PR-6782 [TEP-0089] Enable the signing and verification of TR results and the TR status