This article shows how to sign every container image using Cosign keyless signing in GitHub Actions and enforce signatures at pod admission with Kyverno, using the chalk/debug npm attack as the real-world motivation ➤ https://ku.bz/7WkPPBjwH

1 likes 0 replies