Practical DevSecOps: Hardening the Supply Chain in the Age of SBOMs
GitHub Actions pipeline: Syft SBOM, Grype gate, keyless signing and attestation with Cosign v3, and admission-time verification with Kyverno.
Tag
#cosign
1 posts with this tag
1 posts with this tag
GitHub Actions pipeline: Syft SBOM, Grype gate, keyless signing and attestation with Cosign v3, and admission-time verification with Kyverno.