Hardening Container Supply Chains: Cosign Signatures and SBOM Attestations
Securing Docker container images with cryptographic keyless signatures using Sigstore Cosign and CycloneDX SBOM generation in CI/CD.
Security & IAM
Articles and architectural guides categorized under Security & IAM (2 found).
Zero-Trust CI/CD with Azure DevOps and Workload Identity Federation
Eliminate vulnerable service account JSON keys using OpenID Connect (OIDC) token exchange between Azure DevOps and Google Cloud IAM.