Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Project still maintained? #83

Open
ghost opened this issue Sep 27, 2023 · 1 comment
Open

Project still maintained? #83

ghost opened this issue Sep 27, 2023 · 1 comment

Comments

@ghost
Copy link

ghost commented Sep 27, 2023

I got to this project following the Google documentation about Binary Authorization:
https://cloud.google.com/binary-authorization/docs/creating-attestations-voucher

They mention two options for security vulnerability attestations, Kritis and Voucher.
I noticed that Kritis might not be maintained anymore (grafeas/kritis#632)

Is Voucher is still maintained?

The README of this project mentions: "Binary authorization uses an admission controller such as Kritis", does Voucher use Kritis?, or are these totally separate?

@thepwagner
Copy link
Collaborator

Per https://github.com/shopify/voucher being archived, Shopify is no longer using voucher or involved in this repository.
Most, but not all, contributors have been from Shopify: https://github.com/grafeas/voucher/graphs/contributors
We defer a decision about official deprecation to our partners in Google Cloud (e.g. @ooq, _rhdesmond et al).

Shopify replaced Voucher with a system that wraps https://github.com/kyverno/kyverno/ policies to produce binary authorization attestations. We like how other admission controllers provide a general "policy" abstraction for us, so we shifted to wrapping an admission controller to produce our binauthz attestations.
We like how this prevents coupling to GKE - we could run the same policies using Kyverno directly as an admission controller.

Our new system is not open source, sorry.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant