Describe the feature request
The convention controller is currently able to discover SBOMs created by CNB, but are hardly the only SBOMs. We should also provide equal support for SBOMs attached to images via projectsigstore cosign.
Additional context
sigstore/cosign#387
ko-build/ko#507
Describe the feature request
The convention controller is currently able to discover SBOMs created by CNB, but are hardly the only SBOMs. We should also provide equal support for SBOMs attached to images via projectsigstore cosign.
Additional context
sigstore/cosign#387
ko-build/ko#507