When and Where Tuesdays at noon Eastern, 9am Pacific, 4pm UTC; find your time Google Meet Video call link: https://meet.google.com/squ-dtxk-xdi Or dial: ‪(US) +1 617-675-4444‬ PIN: ‪162 989 889 5668‬# More phone numbers: https://tel.meet/squ-dtxk-xdi?pin=1629898895668 Or join via SIP: sip:1629898895668@gmeet.redhat.com Agenda

Mission Statement: Shipwright aims to do one thing well: build images from source. Automatically, securely, reliably. Features that further that goal should be welcomed, and prioritized to optimize that goal. Features that don't should be improved and removed if necessary. Shipwright should be simple to use and flexible to extend. Once set up, it should run smoothly for users and operators alike, and when failures happen (they always do) they should be easy to diagnose and fix. Build ← you are here! Pluggable BuildStrategies, with pre-defined support for Buildpacks, Kaniko, S2i, Buildah; users can modify, install their own Continue to improve built-in BuildStrategies for security best practices (#169)

(without using Shared Informer) https://pkg.go.dev/k8s.io/client-go@v0.20.0/kubernetes Listing and getting ConfigMaps clientset := kubernetes.New(cfg) resp, err := clientset.CoreV1().ConfigMaps(ns).List(...) cm, err := clientset.CoreV1().ConfigMaps(ns).Get(...)

https://github.com/opencontainers/image-spec/issues/821 Proposed Standard Annotations: org.opencontainers.image.base.digest org.opencontainers.image.base.ref.name (matches the format of "org.opencontainers.image.ref.name Name of the reference for a target (string).") https://github.com/opencontainers/image-spec/blob/master/annotations.md

edit: Proposed at https://github.com/opencontainers/image-spec/issues/821 I'd like to propose adding two new standard annotations to the spec, to describe information about an image's base image. Motivation In general, it can be useful to users to be able to answer the question, "what is this image based on", or even for registry hosts to answer "which images are based on [this image]". Use cases include being able to: quickly determine images based on vulnerable base images, without resorting to full image scans.