SLSA related examples and roadmap

[waveywaves]

Currently, no roadmap exists that showcases the project's journey and plan to achieve SLSA. A singular roadmap and the effort towards that would provide clarity on the security goals of the project. Along the way, the project has achieved SLSA 2/3 and there is still some way to go till 4. This is something we know but doesn't exactly show in examples as well. Documenting these examples and getting them out there is important as well for helping the user understand on how these can be set up. Where should we keep these examples and document the SLSA 4 Roadmap for the project are the two questions ?

[vdemeester]

@waveywaves thanks for the discussion.

I think we should have some documentation (so tektoncd/website) on how to achieve SLSA levels (1/2/3/4) when building a CI system with the tekton components.

For the roadmap, I think having/writing this documentation will help define one, and I think, we could start by having it in a discussion to start with (here, in tektoncd/community) and then create issues, …