Batuhan Apaydın

generate fig autocompletion

3

**What would you like to be added**: **Why is this needed**: We (w/@srenatus @anderseknert) did a [similar effort](https://github.com/withfig/autocomplete/pull/854) in OPA to add autocompletion of opa CLI in by [fig](https://github.com/withfig/autocomplete). So,...

add documentation about air gap installation support

4

**What would you like to be added**: We had talked with @luhring @wagoodman related to this and decided to add documentation about the air gap installation support of Grype. **Why...

Question: can we extract KOCACHE instead of saving it to disk to be able use it between stateless builds?

5

AFAIK, KOCACHE only accepts directories as a value. But we couldn't use this cache between stateless builds. For example, each workflow run executes in a fresh VM in GitHub Actions....

LDFLAGS is not passed to ko's build command even if it is defined in .ko.yaml

1

We (w/@dentrax) noticed an [environment variable](https://github.com/google/ko/blob/main/.ko.yaml#L7) in `.ko.yaml` for passing `ldflags` to ko's binary. But in a [workflow](https://github.com/google/ko/blob/main/.github/workflows/image.yaml#L31) used for building ko's image, there is no environment variable to fill...

crane: mutate OCI image layout with annotations, layers etc.

8

### Describe the bug This is not a bug, and this is a feature. ### Additional context Recently, @sudo-bmitch talked about OCI image layout[^1]. He showed a demo of making...

feat: add oci image layout mutation

2

Signed-off-by: Batuhan Apaydın Co-authored-by: Furkan Türkal Fixes #1433 kindly ping @imjasonh for review

FR: Support OCI reference types

1

Once I run `crane copy,` it'll (at the time of writing this) copy only the image itself, but the image may have other materials attached to it such as SBOMs,...

**What would you like to be added**: **Why is this needed**: We (w/@srenatus @anderseknert) did a [similar effort](https://github.com/withfig/autocomplete/pull/854) in OPA to add autocompletion of opa CLI in by [fig](https://github.com/withfig/autocomplete). So,...

In the meantime, the default location for the package path is `.cr-release-packages`[^1], which is a path to a directory with chart packages[^2], and we don't have an input option to...

[Question]: can we use "rekor.tlog.dev" address as a value of the annotation "chains.tekton.dev/transparency"?

6

### Feature request In the meantime, Tekton Chains adds a transparency log server API URL which is "rekor.sigstore.dev"_ to the annotation _"chains.tekton.dev/transparency"_ [^1] but the Chainguard team developed a UI...