Home

Awesome

<!-- --- title: "Supply Chain Security" linkTitle: "Supply Chain Security" weight: 10 description: Artifact signatures and attestations for Tekton cascade: github_project_repo: https://github.com/tektoncd/chains --- -->

Tekton Chains

CII Best Practices

Supply Chain Security in Tekton Pipelines

<p align="center"> <img src="tekton_chains-color.png" alt="Tekton Chains logo"></img> </p>

Getting Started

Tekton Chains is a Kubernetes Custom Resource Definition (CRD) controller that allows you to manage your supply chain security in Tekton.

In its default mode of operation, Chains works by observing all TaskRuns executions in your cluster. When TaskRuns complete, Chains takes a snapshot of them. Chains then converts this snapshot to one or more standard payload formats, signs them and stores them somewhere.

Current features include:

Installation

Prerequisite: you'll need Tekton Pipelines installed on your cluster before you install Chains.

To install the latest version of Chains to your Kubernetes cluster, run:

kubectl apply --filename https://storage.googleapis.com/tekton-releases/chains/latest/release.yaml

To install a specific version of Chains, run:

kubectl apply -f https://storage.googleapis.com/tekton-releases/chains/previous/${VERSION}/release.yaml

To verify that installation was successful, wait until all Pods have Status Running:

kubectl get po -n tekton-chains --watch
NAME                                       READY   STATUS      RESTARTS   AGE
tekton-chains-controller-c4f7c57c4-nrjb2   1/1     Running     0          160m

Setup

To finish setting up Chains, please complete the following steps:

Vendor specific documentation

Any additional documentation specific to particular cloud vendors can be found at docs/vendor.

Tutorials

To get started with Chains, try out our getting started tutorial.

To start signing OCI images and generating signed provenance for them, try our signed provenance tutorial.

Community tutorials

The Chains community has been hard at work creating tutorials as well:

Experimental Features

To learn more about experimental features, check out experimental.md

Want to contribute

We are so excited to have you!

To learn more about Chains: