Billy Lynch
Billy Lynch
Triggers are almost too generic here since they don't have a strong affinity for particular source or could have multiple sources, etc. I think workflows are meant to make this...
@lcarva > Could this be a good place to store information about the Task (for TaskRun attestations) and the Pipeline (for PipelineRun attestations) definitions? Currently, this information is not stored...
> The explanation for the invocation field in slsa spec is "Identifies the event that kicked off the build.". In that sense, I feel like refs (i.e. oci bundles url,...
/uncc @wlynch @vtereso /cc @vdemeester @pxp928 from #839
/cc @vdemeester @pxp928
@ywluogg Can you update this issue with a [task list](https://docs.github.com/en/issues/tracking-your-work-with-issues/about-task-lists) so it's easier to see what's left to do? 🙏 (simple list is fine)
@ywluogg Interested in picking this up? 👀
+1 to Jason / Priya w.r.t. the existing value. If we *really* want this maybe we could put this in a separate configurable annotation? 🤔
Sounds good to me! Go for it. :)
@dependabot rebase