Add support for adding spec of on-cluster pipelines into SLSA v1.0 provenance
Open
@chitrangpatel is already working on this.
Since Jun 21, 2023.
lifecycle/stale
- Dominant language
- Go
- Stars
- 277
- Forks
- 164
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 61
Description
In the SLAS1.0 design doc for Chains, we missed the case where the pipeline spec was applied on the cluster. This is a case when the pipeline is referenced from the local cluster.
According to the current design, the provenance will contain the runSpec in externalParameters which in turn will contain pipelineRef.Name. The underlying spec is not captured in this case and makes the provenance incomplete.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.