Matt Moore
**Actual behavior** If I try to use the upstream `kaniko` images with `cosigned` enabled, the build pods are rejected. **Expected behavior** The upstream releases should be signed against the Fulcio...
This appears [here](https://github.com/google/containerregistry/blob/master/client/v2_2/v2_compat_.py#L119-L121). You can see the affect [here](https://github.com/google/containerregistry/issues/23). Basically Python gunzip performance makes the fast puller 10-12x slower on v2 pulls.
**What happened**: ``` grype output... Executing: grype -o sarif --fail-on low ghcr.io/mattmoor/static@sha256:b7dcd21f108cfed6c394aa18240a26c02f904337a962ca0ffe17368de5c65a23 1 error occurred: * failed to catalog: could not fetch image "ghcr.io/mattmoor/static@sha256:b7dcd21f108cfed6c394aa18240a26c02f904337a962ca0ffe17368de5c65a23": could not read image: unable to...
# Expected Behavior TestPipelineRunTimeout consistently passes with the properly observed failure mode. # Actual Behavior TestPipelineRunTimeout often observes a "Failed" status on the PipelineRun(!!!). # Steps to Reproduce the Problem...
# Expected Behavior A default nonroot version of `git-init` can pass e2e testing without issues. # Actual Behavior ``` Error running git [init /workspace/sourcerepo]: exit status 1 /workspace/sourcerepo/.git: Permission denied...
**Client** The `civil.DateTime` type is unsuitable for use with BigQuery `DATETIME`. These types are advertised for use with BigQuery, e.g. https://github.com/googleapis/google-cloud-go/blob/a2ec33b1badb27a7ca139a9b4d90ebf86b588f11/civil/civil.go#L134-L136 **Environment** BigQuery data transfer service ingesting newline-delimited JSON in...
This truncates the precision of `civil.[Date]Time` from nanoseconds to microseconds because that is the precision limit of BigQuery, which these types are intended to work with. In particular the BigQuery...
* Expected benefits. Who gains the benefits? Why will they benefit? Makes slack channel management self-service through community PRs. * Expected costs. Who bears the costs? How heavy are they?...
Following in the style of https://github.com/GoogleContainerTools/distroless/pull/605 and its predecessors. cc @loosebazooka @chanseokoh
Generally whenever distroless publishes new images, we see a rash of CI failures (e.g. cosigned e2e tests) because the tagged images aren't signed. Looking through, distroless is also unfortunately signing...