Tekton Pipeline Chain Validator
Validates Tekton pipeline supply chain security using Sigstore cosign verification and SLSA provenance checks. Ensures all pipeline tasks have signed images and proper attestation metadata via the Tekton Results API.
Installation
Basic usage or getting-started notes:
Run on Kubernetes
The Tasks which make up a Pipeline can easily be run in isolation
Jump in with the "Getting started" tutorial!
Extracted from upstream docs: https://raw.githubusercontent.com/tektoncd/pipeline/HEAD/README.md