Outcome/Feature Overview (aka. Goal Summary)  

Enrich the OpenShift Pipelines experience for DevSecOps and Software Supply Chain Security use cases such as CVEs, SBOMs and signatures.

Goals (aka. expected user outcomes)

Improving application developer experience when using OpenShift Pipelines by increasing awareness of important SSCS elements. An OpenShift Pipelines PipelineRun's Task can emit CVEs, SBOMs, policy reporting as well as identify signing status.

Requirements (aka. Acceptance Criteria):

• CVE Summary as a column in PipelineRun list view
• Link to SBOM for PipelineRuns
• Add a badge/icon for chains.tekton.dev/signed=true for PipelineRuns