Pipeline and Task CRDs in Tekton were designed to allow users to define each step of their pipeline at a granular level. This means you can track exactly what sources went into a build, what tools were used during the build itself and what artifacts came out at the end. By breaking up a large monolithic pipeline into a series of smaller, reusable steps, you can increase visibility into the overall system. This makes it easier to understand your exposure to supply chain attacks, detect issues when they do happen and recover from them after.”]
Source: https://security.googleblog.com/2021/06/verifiable-supply-chain-metadata-for.html