2 min read
Sign every image, then refuse the ones that are not signed
Signing artifacts is the easy half. The half that changes anything is the admission controller that turns an unsigned image into a failed deploy.
- Supply chain
- Kubernetes
- Policy
Tag
Supply chain
1 post. All posts