Problem: 

Enrich the OpenShift Pipelines experience for DevSecOps and Software Supply Chain Security use cases such as CVEs, SBOMs and signatures.

Goal: 

Improving application developer experience when using OpenShift Pipelines by increasing awareness of important SSCS elements. An OpenShift Pipelines PipelineRun's Task can emit CVEs, SBOMs, policy reporting as well as identify signing status.

Acceptance criteria:

1. CVE Summary as a column in PipelineRun list view
2. Link to SBOM for PipelineRuns
3. Add a badge/icon for chains.tekton.dev/signed=true for PipelineRuns
4. Move pipelinerun results section to output tab using static tab extension point.

Dependencies (External/Internal):

Design Artifacts:

Miro link -  here

Exploration:  

Project GUI enhancements doc