Comments (7)
Some context to get anyone interested started:
Currently the process to push OCI artifacts is completely on GHA: it downloads artifacts from S3 published by Prow and publishes them on GHCR (in the future, also building+publishing on S3 will be handled via GHA, and this work is already in progress) and is triggered manually
The relevant code is written in Go and calls the relevant falcoctl library functions to do the actual push (handled with ORAS)
plugins/build/registry/pkg/oci/oci.go
Line 263 in 904f750
This task involves adding the code necessary to do the signing (with cosign as a library, binary, whatever works best :D), either here or in the falcoctl library, wherever it makes more sense (cc @loresuso )
cc @sumitb
from plugins.
@LucaGuerra I'll work on this, please assign it to me.
from plugins.
/assign @sumitb
from plugins.
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale
.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close
.
Provide feedback via https://github.com/falcosecurity/community.
/lifecycle stale
from plugins.
Hi @sumitb! Did you have a chance to work on this?
I'm asking this as we're working on the same feature, as part of the work the Falco software supply chain security working group is doing.
I share my work in progress here: https://github.com/maxgio92/plugins/tree/feat/registry-print-status
Thank you
from plugins.
/remove-lifecycle stale
from plugins.
Thanks Max! I think your work is great and we're close to the solution :)
from plugins.
Related Issues (20)
- [json plugin error] json.value[...] doesn't accept json pointer HOT 14
- k8s_audit_rules missing rolebinding HOT 8
- Release process cleanup: unify release, OCI publishing and signing workflows HOT 5
- Request: Could a Falco plugin take over responsibility for the AKS Audit Log Forwarder from Sysdig? HOT 12
- Falco CPU 100% and Not Detecting Events HOT 1
- Falco cloudtrail can't parse SQS messages from s3 notifications HOT 1
- TRACKING: update `k8smeta` plugin registry when new capabilities will be available HOT 4
- Clean up GCP Audit Logs rules file HOT 2
- k8smeta: Document collectorHostname and nodeName configuration keys when running in Daemonset HOT 3
- Cloudtrail: Support for multiple accounts
- Application name is not captured by Falco
- [k8saudit-gke] Documentation clarification HOT 1
- Error verifying signatures for cloudtrail:latest, cloudtrail:0.11.0, github:latest, github:0.7.1 HOT 1
- eks audit plugin shows events for system users. HOT 10
- Standardisation capability of Falco rule output HOT 1
- rules of k8saudit-eks plugin use lists defined in falco_rules.yaml, not possible to overwrite HOT 7
- Feature: support additional annotations present on openshift clusters regarding authentication.openshift.io
- Falco Audit Plugin for EKS - HA and sidekick HOT 2
- Document k8smeta in falco's helm-chart with an MWE HOT 1
- K8smeta does not populate its events even though it is configured correctly and there are no errors HOT 9
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from plugins.