Skip to content

chains

Pipelines

Supply Chain Security in Tekton Pipelines

Go Latest v0.27.4 · 9d ago Security brief →

Features

  • Signs TaskRun and PipelineRun results with user‑provided cryptographic keys
  • Generates attestation formats such as SLSA v1 provenance
  • Supports multiple key types (x509, KMS) and storage backends for signatures

Recent releases

View all 13 releases →
No immediate action
v0.27.4 Maintenance

Routine maintenance and dependency updates.

No immediate action
v0.28.1 Maintenance

Routine maintenance and dependency updates.

No immediate action
v0.28.0 Mixed

Rekor embed + storage + signing fixes

No immediate action
v0.27.3 Maintenance
Dependencies

Maintenance updates

No immediate action
v0.26.6 Maintenance

dependency bumps

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
273
Forks
158
Languages
Go Shell Makefile

Community & Support

Beta — feedback welcome: [email protected]