Policy

Sign every image, then refuse the ones that are not signed

Signing artifacts is the easy half. The half that changes anything is the admission controller that turns an unsigned image into a failed deploy.

• Supply chain
• Kubernetes
• Policy