tektoncd/chains

View on GitHub

Supply Chain Security in Tekton Pipelines

Stars: 277
Forks: 164
Open beginner issues: 0
Indexed issues: 56
Avg merge: 2d 3h
Merged PRs (30d): 61

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue help wanted

Beginner friendly Everything

Open All

56 open issues indexed

Bug: MarkSigned called despite signer-load or format-not-found failures (signed=true with no signature) Open

kind/bug

tektoncd/chains#1796 · 1 assignee · Opened Jul 13, 2026
Warn when non-default TUF mirror URL is configured Open

kind/feature

tektoncd/chains#1665 · 1 comment · 1 assignee · Opened May 12, 2026
Warn or block when OCI storage uses result-derived registry without storage.oci.repository Open

kind/feature

Difficulty 3/5 1-2 days Newbie friendliness 62/100

tektoncd/chains#1664 · Opened May 12, 2026
Defense-in-depth: verify Pod exists and is bound to TaskRun before signing Open

kind/feature

Difficulty 4/5 3-5 days Newbie friendliness 45/100

tektoncd/chains#1662 · Opened May 12, 2026
Document Chains trust model for multi-tenant deployments Open

kind/documentation

Difficulty 3/5 1-2 days Newbie friendliness 62/100

tektoncd/chains#1661 · Opened May 12, 2026
Use //go:fix inline for deprecated storage backends and migrate off deprecated pipeline APIs Open

kind/cleanup

Difficulty 4/5 3-5 days Newbie friendliness 42/100

tektoncd/chains#1583 · Opened Mar 12, 2026
Add support for Rekor v2 (rekor-tiles) transparency log Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

tektoncd/chains#1548 · Opened Feb 7, 2026
Google KMS Public Key Open

Difficulty 1/5 Under an hour Newbie friendliness 30/100

tektoncd/chains#1458 · 1 comment · Opened Oct 14, 2025
Move CI jobs to GHA Open

kind/feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

tektoncd/chains#1423 · 4 comments · Opened Aug 24, 2025
Chain Authenticating to an OCI Registry documentation is not consistent and potentially missing Open

kind/bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

tektoncd/chains#1405 · 2 comments · Opened Jul 24, 2025
Add Experimental Post-Quantum Cryptography (MLDSA) Support to Tekton Chains Signing Workflow Open

tektoncd/chains#1367 · 1 comment · 2 reactions · 1 assignee · Opened Jun 5, 2025
Chains should stop signing artifacts type-hinted in pipelines Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

tektoncd/chains#1346 · 7 comments · 2 reactions · Opened Apr 29, 2025
Migrate prow jobs to `.github/workflows` Open

kind/misc

Difficulty 3/5 1-2 days Newbie friendliness 45/100

tektoncd/chains#1317 · Opened Mar 3, 2025
Add support for specifying artifacts to be processed without outputting all URIs to results Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#1270 · 2 comments · Opened Dec 18, 2024
Prefer a domain-qualified finalizer name to avoid accidental conflicts with other finalizer writers (chains.tekton.dev) Open

Difficulty 3/5 1-2 days Newbie friendliness 50/100

tektoncd/chains#1218 · Opened Sep 27, 2024
Chains support for CustomRuns Open

area/roadmap

Difficulty 4/5 3-5 days Newbie friendliness 28/100

tektoncd/chains#1210 · Opened Sep 19, 2024
Pushing kaniko-chains to kind-registry Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

tektoncd/chains#1199 · 1 comment · Opened Sep 12, 2024
Run e2e test on a kind cluster/locally Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

tektoncd/chains#1192 · Opened Sep 4, 2024
panic using ed25519 signing key Open

kind/bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

tektoncd/chains#1189 · Opened Aug 27, 2024
TestWatchBackend/verify_mongo-server-url-dir/MONGO_SERVER_URL_is_watched is buggy Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

tektoncd/chains#1178 · 1 comment · Opened Aug 19, 2024
Archivista Backend Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#1165 · 1 comment · Opened Jul 26, 2024
Promote SLSAv1.0 offering of Chains format to `beta` Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

tektoncd/chains#1160 · 4 comments · 1 reaction · Opened Jul 18, 2024
Chains metrics Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

tektoncd/chains#1150 · 2 comments · 1 reaction · Opened Jul 3, 2024
Sigstore not working properly with `transparency.enabled: manual` Open

kind/bug

Difficulty 4/5 3-5 days Newbie friendliness 43/100

tektoncd/chains#1117 · Opened May 10, 2024
Move tools.go to its own module Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

tektoncd/chains#1097 · 2 reactions · Opened Apr 5, 2024
Failure to connect to storage backends should fail readiness probe Open

kind/feature

tektoncd/chains#1094 · 2 comments · 2 reactions · 1 assignee · Opened Apr 3, 2024
Add reload and/or restart functionality to Chains Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 30/100

tektoncd/chains#1093 · 5 comments · Opened Apr 3, 2024
Reduce number of annotations Chains stores in CRD objects Open

help wanted kind/feature

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#1076 · 2 comments · Opened Mar 14, 2024
Users should not supply auth token in chains-config configMap in plaintext Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 30/100

tektoncd/chains#1074 · 4 comments · Opened Mar 14, 2024
Chains should sign and attest to all Image Manifests in an Image Index Open

kind/feature

Difficulty 4/5 3-5 days Newbie friendliness 45/100

tektoncd/chains#1070 · 6 comments · 1 reaction · Opened Mar 11, 2024
Chains under the load memory consumption raises Open

kind/bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

tektoncd/chains#1058 · 3 comments · Opened Feb 21, 2024
Limit client libraries for external usage Open

kind/bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#1044 · 1 comment · Opened Feb 1, 2024
[bug] Currently `verifier.go` uses an empty config.Opts when calling `storage/*` `Retrieve*` method -> ShortKey is not defined -> no object found Open

kind/bug

Difficulty 3/5 1-2 days Newbie friendliness 38/100

tektoncd/chains#1030 · Opened Jan 10, 2024
Failed to sign pipelineRun with error: failed to set finalizers: admission webhook \"webhook.pipeline.tekton.dev\" denied the request: mutation failed: cannot decode incoming new object: json: unknown field \"EnableCELInWhenExpression\" Open

kind/bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

tektoncd/chains#1009 · 3 comments · Opened Dec 6, 2023
"rerun" of pipelineRun in OpenShift, doesn't clear annotations Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

tektoncd/chains#1004 · 3 comments · Opened Dec 1, 2023
Support Vault Kubernetes authentication Open

kind/feature

Difficulty 4/5 3-5 days Newbie friendliness 35/100

tektoncd/chains#989 · Opened Nov 5, 2023
Propagate error to Run resources Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 35/100

tektoncd/chains#984 · Opened Nov 2, 2023
Add a way (annotations?) to mark a Tekton Resource to be skipped= Open

kind/feature

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#979 · 11 comments · Opened Oct 31, 2023
[rfc] Separate Chains controller system and userspace identities. Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#968 · 3 comments · Opened Oct 25, 2023
docs import doesn't respect relative links Open

kind/bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

tektoncd/chains#967 · Opened Oct 25, 2023
invocation.configSource.uri does not conform to SLSA schema Open

kind/bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

tektoncd/chains#934 · Opened Oct 4, 2023
Include PipelineRun in diagrams Open

kind/feature

Difficulty 2/5 1-2 days Newbie friendliness 50/100

tektoncd/chains#929 · 3 comments · Opened Sep 19, 2023
Improve Tekton Object Interface Open

kind/feature lifecycle/stale

tektoncd/chains#875 · 2 comments · 1 assignee · Opened Jul 20, 2023
Key rotation Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#868 · 5 comments · Opened Jul 19, 2023
internalParameters update in SLSAv1.0 provenance Open

lifecycle/stale

Difficulty 5/5 Over a week Newbie friendliness 20/100

tektoncd/chains#839 · 5 comments · Opened Jun 23, 2023
Update buildType in SLSAV1.0 provenance Open

kind/feature lifecycle/stale

Difficulty 5/5 Over a week Newbie friendliness 35/100

tektoncd/chains#838 · 4 comments · Opened Jun 23, 2023
Add task results to SLSA 1.0 predicate for pipeline runs Open

good first issue

Difficulty 4/5 3-5 days Newbie friendliness 35/100

tektoncd/chains#835 · 3 comments · 2 reactions · Opened Jun 21, 2023
Add support for adding spec of on-cluster pipelines into SLSA v1.0 provenance Open

lifecycle/stale

tektoncd/chains#834 · 8 comments · 1 reaction · 1 assignee · Opened Jun 21, 2023
Support new predicate type for pipelineRun resource Open

kind/feature lifecycle/rotten

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#824 · 12 comments · 1 reaction · Opened Jun 8, 2023
Unable to sign image with kaniko when using --no-push arg Open

kind/bug lifecycle/rotten

Difficulty 5/5 Over a week Newbie friendliness 25/100

tektoncd/chains#803 · 5 comments · Opened May 12, 2023

tektoncd/chains

Get new issues in your inbox