chains
chains copied to clipboard
tektoncd
Add Grafeas as a storage backend
Feature request
To use Grafeas as a storage backend in Tekton Chains
Background
Users can configure Tekton Chains based on their needs. Two main configurations are artifacts.taskrun.format and artifacts.taskrun.storage. By configuring artifacts.taskrun.storage, users can determine where to store the provenance and signature for the TaskRuns once they are created. Currently the options we have in Tekton Chains are within Tekton itself, an OCI registry, Google Cloud Storage (GCS) and docdb.
Design
Now, we’re planning on adding Grafeas to Tekton Chains as a storage backend. Grafeas is an open artifact metadata API. It offers a central, structured knowledge-base of the artifact metadata that is critical to manage software supply chains. We’ll follow up with more details. Comments and feedback are welcome!
Hey @chuangw6 , can this be closed or is there more work to be done?
Hi @priyawadhwa , There is more work to be done. Specifically, we want to change from using grafeas v1beta1 to v1.
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale with a justification.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close with a justification.
If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.
/lifecycle stale
Send feedback to tektoncd/plumbing.
Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten with a justification.
Rotten issues close after an additional 30d of inactivity.
If this issue is safe to close now please do so with /close with a justification.
If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.
/lifecycle rotten
Send feedback to tektoncd/plumbing.