Signed containers with provenance and integration with simple-ros example.

runs/simple-ros-pipeline.yaml

@@ -0,0 +1,23 @@
+apiVersion: tekton.dev/v1beta1
+kind: PipelineRun
+metadata:
+  generateName: simple-ros-pipeline-
+  namespace: j7s-ci
+spec:
+  pipelineRef:
+    name: simple-ros-pipeline
+  workspaces:
+  - name: shared-data
+    volumeClaimTemplate:
+      spec:
+        accessModes:
+        - ReadWriteOnce
+        resources:
+          requests:
+            storage: 1Gi
+  - name: git-credentials
+    secret:
+      secretName: git-credentials
+  - name: cosign-credentials
+    secret:
+      secretName: container-signing-secret