Supply Chain Security in Tekton Pipelines
Role in this project:
Back-end Developer Contributions:52 reviews, 11 commits, 9 PRs in 4 months
Contributions summary:Yawen primarily contributed to the `tektoncd/chains` repository by adding support for Maven packages within the Tekton Chains project. Their work involved extending the existing functionality to extract and process Maven package artifacts within TaskRun results for inclusion in in-toto provenance attestations. They added the necessary code to handle Maven packages by including new structured schema to support intoto provenances and refactoring of existing code. Additionally, the user made modifications to the testing framework by adding new tests.
supply-chain-securitytekton-pipelines
A K8s-native Pipeline resource.
Contributions:16 PRs, 81 pushes, 11 branches in 2 months
pipelinetektonk8skubernetestekton-pipelines