Supply Chain PoC with Cartographer and CDEvents (https://cartographer.sh)

[salaboy]

Adding to the Knative PoC, it will be great to have a PoC integrating Supply Chain tools like https://cartographer.sh to improve the vocabulary to demonstrate how such tools can coordinate existing tools such as Jenkins, Tekton and Knative by using CDEvents.

This issue can be used to discuss an initial use case that we can aim to implement and to bring people from the sig-supplychainsecurity into the conversation.

@rawlingsj I am pretty sure that you will be interested in defining how an initial PoC can look like.

[fdegir]

Adding @davidmirror-ops since we brought this topic up during Cartographer presentation to CDF SIG Software Supply Chain meeting.