Sambhav Kothari

In terms of the actual dependencies, the library does not import any external package -> https://github.com/go-logr/logr/blob/master/go.mod Even in terms of stdlib it only imports the context package https://pkg.go.dev/github.com/go-logr/logr?tab=imports As for...

@ForestEckhardt there are also some open questions about the way that packit implements SBOMs https://paketobuildpacks.slack.com/archives/C011S6EL49L/p1653411685386879 should we table this PR until at the very least the relevant parties can meet...

LGTM, thanks for shepharding this!

Mostly happens if people push to a registry that doesn't accept non docker oci artifacts.

> I think indicating a signing failure independently in the conditions makes sense. Happy with this.

@alicederyn can you also review this please.

A few unresolved qs from my side - What happens when there are multiple lifecycle crds? Can we specify a default? Is this a cluster only resource? What happens when...

Somewhat related is https://github.com/modelcontextprotocol/modelcontextprotocol/issues/469 which I like to think of as i18n in the context of an LLM native world.