Tekton Pipeline Chain Validator

Validates Tekton pipeline supply chain security using Sigstore cosign verification and SLSA provenance checks. Ensures all pipeline tasks have signed images and proper attestation metadata via the Tekton Results API.

Installation

Basic usage or getting-started notes:

• Run on Kubernetes

• The Tasks which make up a Pipeline can easily be run in isolation

• Jump in with the "Getting started" tutorial!

• Source: https://github.com/tektoncd/pipeline

• Extracted from upstream docs: https://raw.githubusercontent.com/tektoncd/pipeline/HEAD/README.md

Documentation

• https://tekton.dev/docs/pipelines/

Source

• Agent Skill Exchange