Pooja Bolla·6d agoSoftware Supply Chain Security on Kubernetes, Part 3: Enforcing Signatures and SBOM Attestations…How I got the cluster to refuse unsigned or unscanned images with one Kyverno policy, the attacks it stopped in my lab, and the failure…
Pooja Bolla·Nov 2Software Supply Chain Security on Kubernetes, Part 1: Signing Container Images with CosignHow I sign and verify container images with Cosign v3, so I can prove the image running in the cluster is the one our pipeline built.
HIDOURI Bellkis·Oct 5Supply-Chain — Container Image Signing on AKS with Cosign and KyvernoWhy sign images at all
Zero CVE Club·Sep 25What Is Software Supply Chain Security?Software supply chain security means controlling what enters your build and proving what leaves it. Sonatype counted 454,600 new malicious…
Gunjan Mehta·Sep 24You Already Use TUF. You Just Don’t Know Where.Nine places The Update Framework protects a SaaS stack, and the one place you have to build it yourself
