Generic workflow/library

[slsa-framework]

Generic workflow/library

[joshuagl]

I like this a lot. A generic workflow and CLI will be enough to bootstrap many ecosystems. Where it is not, the CLI and generic workflow will make the phases and how to implement them much more concrete, as well as providing a building block for proof of concept.

I will start implementing a PoC this over the next week or so, focusing on supporting a Gradle project.
(I've assigned this Issue to me, lmk if anyone objects)

[ianlewis]

I think we can close this once we GA the generic workflow(s).

[ianlewis]

Is the idea here is to better support ecosystem builders? or is this something meant to have its own reusable workflow where user specifies commands to be executed?

If the latter, I've been thinking that supporting a config yaml file in the repo root would be the best approach rather than having lots of inputs to the workflow that just get put on the command line.

[laurentsimon]

Is the idea here is to better support ecosystem builders?

yes, to help build a single reusable workflows that works across multiple ecosystems.

[laurentsimon]

An additional data point for ko https://github.com/laurentsimon/slsa-on-github-test/blob/main/.github/workflows/ko-caller.yml - I plan to move it to this repo soon

[ianlewis]

I'm going to just close this since there's nothing more to be done for this issue specifically. If we need something else let's create a new issue.