The essay walks through a hands-on pipeline that signs Kubernetes container images with Cosign, enforces them with Kyverno, and stores keys in HashiCorp Vault—all wired together in GitLab CI. You’ll leave with a reproducible template for securing your software supply chain.
https://angapov.medium.com/kubernetes-container-images-signing-using-cosign-kyverno-hashicorp-vault-and-gitlab-ci-c4e2041d1310
Post #2318
7K