Pooja Bolla·2d agoSoftware Supply Chain Security on Kubernetes, Part 1: Signing Container Images with CosignHow I sign and verify container images with Cosign v3, so I can prove the image running in the cluster is the one our pipeline built.
HIDOURI Bellkis·Oct 5Supply-Chain — Container Image Signing on AKS with Cosign and KyvernoWhy sign images at all
Zero CVE Club·Sep 25What Is Software Supply Chain Security?Software supply chain security means controlling what enters your build and proving what leaves it. Sonatype counted 454,600 new malicious…
Gunjan Mehta·Sep 24You Already Use TUF. You Just Don’t Know Where.Nine places The Update Framework protects a SaaS stack, and the one place you have to build it yourself
Anitha Natarajan·Sep 1Running Red Hat Trusted Artifact Signer on kind ClusterBuild the operator from source, stand up your own Sigstore on one node, and sign a real image
