burrsutter

# Copyright The Enterprise Contract Contributors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,

burrsutter

STEP-EXTRACT-SIGNING-SECRET
STEP-EXTRACT-COSIGN-PUBLIC-KEY
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEw8h1Rpj/gkYtZDZlC7GeKcuxdVQh
sy3FJ2BZMmw+gQkKbIe0YlowjERsBjnS5pDcyyG9gSs7dSQTqb4L8jB1rw==
-----END PUBLIC KEY-----

STEP-VERSION
Version            v0.1.2410-2f65d22
Source ID          2f65d22d006597d65f16318c821ad7d9ad7f9d96

burrsutter

NAME                                  READY   STATUS             RESTARTS        AGE
apply-dataset-7r4zx                   0/1     CrashLoopBackOff   6 (3m51s ago)   9m26s
bombastic-api-5895c578f-w647v         0/1     CrashLoopBackOff   7 (19s ago)     11m
bombastic-indexer-579cf989bc-ktntw    1/1     Running            0               11m
exhort-api-bcb57955d-5b8gt            0/1     CrashLoopBackOff   7 (28s ago)     11m
guac-collectsub-cd9b8f6c5-wrntc       1/1     Running            0               11m
guac-graphql-6585795f5d-x4f4g         1/1     Running            0               11m
kafka-6d75d8767f-hcsd6                1/1     Running            0               11m
minio-676c459cd8-sj6bf                1/1     Running            0               11m
post-install-keycloak-44fsh           0/1     Completed          0               10m

burrsutter

NAME                                  READY   STATUS             RESTARTS         AGE
apply-dataset-g628f                   0/1     CrashLoopBackOff   22 (4m45s ago)   92m
bombastic-api-784dc79d47-qt8jv        0/1     CrashLoopBackOff   23 (2m37s ago)   95m
bombastic-collector-28419480-6cnsd    0/1     Completed          0                38m
bombastic-indexer-579cf989bc-8sxhc    1/1     Running            0                95m
exhort-api-5fd97d6ddd-fklcn           0/1     CrashLoopBackOff   23 (2m18s ago)   95m
guac-collectsub-75f959657-x5trm       1/1     Running            0                95m
guac-graphql-6694889b7b-jdlbc         1/1     Running            0                95m
kafka-6d75d8767f-8dcff                1/1     Running            0                95m
minio-676c459cd8-29db2                1/1     Running            0                95m

burrsutter

82  name: Default
83  publicKey: /workspace/cosign.pub, Opens in a new window
84  rekorUrl: http://rekor-server.rekor.svc, Opens in a new window
85  sources:
86  - config:
87      include:
88      - '@slsa3'
89    data:
90    - oci::quay.io/redhat-appstudio-tekton-catalog/data-acceptable-bundles:latest, Opens in a new window
91    - github.com/release-engineering/rhtap-ec-policy//data, Opens in a new window

burrsutter

# Copyright The Enterprise Contract Contributors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,

burrsutter

# Copyright The Enterprise Contract Contributors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,

burrsutter

apiVersion: tekton.dev/v1
kind: Task
metadata:
  name: roxctl
  annotations:
    task.output.location: results
    task.results.format: application/json
    task.results.key: SCAN_OUTPUT  
spec:
  results:

burrsutter

                "chain": {
                    "artifacts.oci.storage": "oci",
                    "artifacts.pipelinerun.format": "in-toto",
                    "artifacts.pipelinerun.storage": "oci",
                    "artifacts.taskrun.format": "in-toto",
                    "artifacts.taskrun.storage": "oci",
                    "disabled": false,
                    "transparency.enabled": "true",
                    "transparency.url": "http://rekor-server.rekor.svc"
                },

burrsutter

STEP-EXTRACT-SIGNING-SECRET

STEP-EXTRACT-COSIGN-PUBLIC-KEY

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECO7jp8VdlYSRIfrr+/uuDSH98LDB
VdvtxHqtSgjD6lyoSx7qzrSMr/aSRtGg28fBdNFjwksa8asre2YqDpcKHw==
-----END PUBLIC KEY-----