Adrian Mouat
Adrian Mouat
I'd just say you have to assume it can die at any moment. So put in a cache if you like, but make sure it works without it.
Upped this to P1 as I think it would give us a strong sell in demos if our SBOMs are bomb. For the moment at least it will be a...
Will this enable hermetic builds?
A decent apko build container would help in the short-term as well.
The apko container is in a pretty good place now. We should add some more docs on using the image (and similar for melange).
Added some docs on using the container image to #311
Definitely +1 from me. Just to be clear, this is effectively combining the 2 yaml files? All the config including entrypoint etc will copied in? It might be worth having...
I added instructions to use the new Docker image in #311, which I think replaces this.
I added some more docs about getting started on Mac and the Docker requirement to #311, which I think closes this issue.
Is this blocked on sigstore API stuff? Is there an issue we can reference?