kubernetes-sigs / tejolote

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Prow support

puerco opened this issue · comments

What would you like to be added:

Add prow to the supported build systems.

Why is this needed:

Lots of build processes in Kubernetes and the cloud native world run on Prow. We need to add support for prow as a build system to enable attesting those builds.

/assign

@puerco @cpanato I think this issue needs to stay on hold as the prow is not completely safe to create secured attestation. Kindly follow this slack thread link https://kubernetes.slack.com/archives/CDECRSC5U/p1683783855676259 for more info.