This article demonstrates supply chain security:
- Cosign, Kyverno, and HashiCorp Vault to secure container images in Kubernetes
- GitLab CI to build, push, and sign images with Cosign and Vault.
- Kyverno to enforce policies for signature verification.
More: https://angapov.medium.com/kubernetes-container-images-signing-using-cosign-kyverno-hashicorp-vault-and-gitlab-ci-c4e2041d1310
Post #1089
493
