-
Notifications
You must be signed in to change notification settings - Fork 389
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[WIP] Feature: Add support for verifying base image policies. #918
base: main
Are you sure you want to change the base?
Conversation
16abaeb
to
fa3dd46
Compare
Codecov Report
@@ Coverage Diff @@
## main #918 +/- ##
==========================================
- Coverage 51.30% 50.16% -1.14%
==========================================
Files 44 48 +4
Lines 3417 3654 +237
==========================================
+ Hits 1753 1833 +80
- Misses 1435 1588 +153
- Partials 229 233 +4
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. |
fa3dd46
to
6d3bd33
Compare
6d3bd33
to
5648907
Compare
5648907
to
c91ac4d
Compare
The upstream work is ongoing here: sigstore/policy-controller#480 |
c91ac4d
to
565e1f4
Compare
🎁 This implements the very basics from my recent comment on ko-build#356. This still needs the upstream changes to land in a release, but illustrates how the integration will work. /kind feature
565e1f4
to
7f28ac9
Compare
This Pull Request is stale because it has been open for 90 days with |
🎁 This implements the very basics from my recent comment on #356.
This still needs a bunch of work, but some playing with it and
go run
seem to demonstrate what I'd hope for.Things I'd like to do still:
match:
,includeSpec:
),pkg/policy
upstream tosigstore/policy-controller
to facilitate using this in other projects with similar ease (e.g. kaniko, buildpacks, ...)/kind feature
Fixes: #356 (comment)