Konflux
Konflux is an open source, opinionated Kubernetes-native software factory built on Tekton, focused on software supply chain security. It provides an end-to-end pipeline: hermetic builds from source, cryptographic signing, provenance attestation, vulnerability scanning, policy verification, and release automation. Konflux integrates with the broader supply chain security ecosystem (Sigstore, SLSA, Conforma) and is built by a welcoming community that values collaboration, transparency, and mentorship. Contributors work with cutting-edge cloud-native technologies and help shape how we solve one of the most critical challenges in modern software delivery.
GSoC Participation History
Technologies
Topics
Past Projects
zstd:chunked compression
This project adds zstd:chunked compression to Konflux builds while keeping compatibility with older Docker versions. It does this by pushing both...
prefetch: Adding support for the uv Python package manager to the Hermeto project
This project aims to add native support for the UV Python package manager to Hermeto, enabling hermetic builds for projects using pyproject.toml and...
Reproducible Builds: Pipeline Wiring, Verification Tooling, and Benchmark Suite
Konflux container builds produce different image digests from identical source commits. The buildah task already supports reproducibility flags, but...
Frequently Asked Questions
Konflux | GSoC Org Profile & Stats - Learn about Konflux's involvement in Google Summer of Code (GSoC), their technologies, detailed reports.
Participation
Projects
Top Programming Languages
Project Difficulty Distribution
No difficulty data available