Batuhan Apaydın

I was building the `net-snmp` package but CI failed with `ERROR: packages/x86_64/net-snmp-dev-5.9.4-r0.apk: package file format error` during the apk-addable test. This is .PKGINFO of the locally built `net-snmp-dev` subpackage: ```...

add an option for go flags in go/build pipeline

1

We (w/@dentrax) thought that if people want to add additional flags for the Go build, we should provide an option for this in the melange go/build pipeline, but there is...

strip: Unable to recognise the format of the input file while using goreleaser/build

1

I made an example to test newly created goreleaser/build pipeline with an example package named grpc-health-probe.yaml. Somehow, strip pipeline seems is not working and giving the following error: > aarch64...

Similar to [this one](https://github.com/chainguard-dev/apko/issues/639) on apko side, melange is also doing the same and enabling [pre-release option](https://github.com/chainguard-dev/melange/blob/3c869d5b2220d57664306081c8d4ecb2c9d9ff2d/.goreleaser.yaml#L63) in GoReleaser which eventually causes GitHub not to mark the release as latest....

ability to load policies over OCI

1

Rego policies can be shared over OCI registries by using the conftest tool which means that you can basically push and pull your Rego policies. So, we can load policies...

enable loading rego policies from dir

1

There is a section in the configuration file of the rekor-sidekick called `policies` to define what policies should rekor-sidekick load into it, so, if you have lots of policies, this...

[Question] how can I use inFipsJvm option in gradle for enabling the FIPS 140 mode for the build?

2

### Is your feature request related to a problem? Please describe I tried -Porg.opensearch.gradle.info.BuildParams.inFipsJvm=true and -PinFipsJvm but the build logs still say `In FIPS 140 mode: false` as false, so...

add musl support

1

For Linux, you probably want musl (e.g. x86_64-linux-musl) because your resulting binary will be statically linked and thus work on all Linux distributions. However, if you prefer to interact with...

add two new options --max-requests-inflight and --max-mutating-requests-inflight to control-plane's default options

7

**What would you like to be added**: APF (API Priority and Fairness) is a mechanism to control the behavior of the Kubernetes API server in an overload situation and is...

sign SBOMs through cosign tool right after generated it through bom tool

20

#### What would you like to be added: We talked about a bit of generating/signing process of SBOMs on the `sigstore` Slack channel. In this talk @SantiagoTorres and @nadgowdas made...