Signing Container Images with GitHub Actions using Notary

preview_player
Показать описание
In this video, you'll learn how to digitally sign a container image hosted in Azure Container Registry using Notary with a GitHub workflow.

Notary is a CNCF project that provides a set of tools that help you sign, store, and verify OCI artifacts using OCI-conformant registries. Digitally signing artifacts is one of many steps you can take to secure your software supply chains and improve the security of your software.

Mentors: Jorge Arteiro @jorgearteiro and Paul Yu @PauldotYu

Notary Blog series

Repos:

Рекомендации по теме
Комментарии
Автор

@Josh Jorge This is great walk through such critical work flow, Did you guys create code verification video

cjiten
welcome to shbcf.ru