Billy Lynch

gittuf <-> gitsign attestation compatibility

2

### Add a description Context: https://github.com/gittuf/gittuf/pull/170 We should look into gittuf + gitsign attestation compatibility. . | gittuf | gitsign --|--|-- ref | refs/gittuf/attestations | refs/attestations/commitsrefs/attestations/trees... attestation path | refs/heads/main/a-b...

Right now Foundation won't collapse it's menu to the mobile menu block until it goes below 640px. We should look into if this can be triggered when the elements collide.

Idea: Extending Authentikos to other credential types

2

Hi! Over at the [Tekton](https://tekton.dev) project, we've been thinking about how to handle GitHub App credentials. We ended up leaning towards a [refresher design](https://docs.google.com/document/d/1dauJtzMWwxutwV38FwtSpauBhA9nKLNjZTIrYEjSaao/edit) just like Authentikos, since GitHub App...

[integrations] Tekton Dashboard

32

Tracking issue for integrating with the [Tekton Dashboard](https://github.com/tektoncd/dashboard). We'd like to surface Results/Records in the Tekton UI so that users can visualize the logic groupings / extra data Results can...

[integrations] Tekton Triggers

12

Tracking issue for integration with [Tekton Triggers](https://github.com/tektoncd/triggers). Our goal here is to start recording input events (e.g. Push/Pull Request payload) as part of results, and group this in the same...

experiment: Add Wolfi based images

4

Opening as a draft since if we actually want to do this or not, but opening up for discussion. (cc @afrittoli) Adds some initial images (ko, ko-gcloud) based on [Wolfi](https://wolfi.dev)...

CI not responding to test retry commands

5

# Expected Behavior Using the `/test` command CI suggests should rerun the tests. # Actual Behavior CI doesn't recognize the command it suggests, saying `The specified target(s) for /test were...

Enable commit signing

13

### Feature request We should enable commit signing so that commits to main are signed and can be verified. Ideally it'd be great if everyone could sign commits, but to...

## New Image Pull Request Template ### Image Size ``` # Size ┌──────────────────────────────────┬────────────┬──────────────┐ │ Image │ Compressed │ Uncompressed │ ├──────────────────────────────────┼────────────┼──────────────┤ │ ghcr.io/sigstore/gitsign:v0.10.1 │ 37 MB │ 92 MB │...

Feature: Dangerous Workflows - Imposter Commit Check

13

**Is your feature request related to a problem? Please describe.** We disclosed an issue with GitHub Actions today that lets users bypass workflow settings by using forked commits - https://www.chainguard.dev/unchained/what-the-fork-imposter-commits-in-github-actions-and-ci-cd...