[new-product]: policy-controller #6042
Conversation
policy-controller.md
Outdated
|
|
||
| identifiers: | ||
| - purl: pkg:github/sigstore/policy-controller | ||
| - repology: sigstore |
There was a problem hiding this comment.
This seems like the package for sigstore-python in homebrew only at this point:
| - repology: sigstore |
https://repology.org/project/sigstore/information
This will very likely be installed as a container image, so we should include those in the identifers. I could find the following relevant images:
There was a problem hiding this comment.
The releaseCycle look inaccurate. Having a supportedK8sVersions (see kyverno.md custom column will be nice.
It is unclear to me if the product is considered stable for production use. There is no 1.x release, and the website says:
This component is still actively under development!
None of the releases so far mention stable or production.
policy-controller.md
Outdated
|
|
||
| > [policy-controller](https://github.com/sigstore/policy-controller) The policy-controller admission controller can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign. | ||
|
|
||
| We are intending to move to a monthly cadence for minor releases. Minor releases will be published around the beginning of the month. We may cut a patch release instead, if the changes are small enough not to warrant a minor release. We will also cut patch releases periodically as needed to address bugs. |
There was a problem hiding this comment.
All descriptions should use a neutral third-person voice, something like:
| We are intending to move to a monthly cadence for minor releases. Minor releases will be published around the beginning of the month. We may cut a patch release instead, if the changes are small enough not to warrant a minor release. We will also cut patch releases periodically as needed to address bugs. | |
| The project is planning to move to a monthly cadence for minor releases, which will be | |
| published near the month start. A patch release might be made instead if | |
| the changes are small enough. |
addition of sigstore policy controller https://docs.sigstore.dev/policy-controller/overview/