Jason Hall

In the last ~month, the OCI working group for reference types has proposed and accepted https://github.com/opencontainers/distribution-spec/pull/335 and https://github.com/opencontainers/image-spec/pull/934 which describe an OCI-official method both for describing and querying artifacts-that-reference-things (e.g.,...

There's some work ongoing in ggcr now: https://github.com/google/go-containerregistry/pull/1455 When that gets closer to landing I will try to see how cosign should use it, to make sure it's a good...

Friendly ping.

> Hi all, are there any other changes requested to get this merged? I'll keep merging with main to keep things fresh but I don't believe I have any other...

> /test all (Just realized it was skipping CI.. 🙃 ) Yeah, it's got some work to do to pass even the unit tests. I might try this as a...

It seems something somewhere was depending on this to persist the task labels or something; this fails on the only test that checks that the task label is persisted on...

Aside from needing to rebase, I need to figure out why label propagation is broken by this. I _think_ we're relying on there being two updates of the object in...

/test pull-tekton-pipeline-alpha-integration-tests

/assign ywluogg cc @NavidZ since this relates to metrics

> The pod needs a service account token with permissions to read out all secret in the namespace from the api server. This part worries me a bit. Does this...