Tag Archives: cosign

Signing And Verifying Container Images With Sigstore Cosign And Kyverno

If we want to be certain that what we’re running is what we built, we might need to sign container (Docker) images, as well as other types of artifacts. That’s where Cosign jump in. Sigstore Cosign makes signatures invisible, especially if we combine it with Kyverno or other Kubernetes admission controller solutions.

Continue reading