Hardening Container Supply Chains: Cosign Signatures and SBOM Attestations
Securing Docker container images with cryptographic keyless signatures using Sigstore Cosign and CycloneDX SBOM generation in CI/CD.
#security
Articles tagged with #security (2 found).
Zero-Trust CI/CD with Azure DevOps and Workload Identity Federation
Eliminate vulnerable service account JSON keys using OpenID Connect (OIDC) token exchange between Azure DevOps and Google Cloud IAM.