Open
Description
Operators can setup third-party integrations to send materials or attestations once received by the controlplane. These integrations in general are meant to be off-the-shelf i.e dependency-track, guacsec/guac, OCI registry, but in some cases you might want to actuate on a custom endpoint.
This is useful if you've built a custom backend or simply as an escape hatch while your desired integration is not available yet.
This task is about designing and implementing a fan-out integration that could send attestations to a provided webhook URL.