tag

#sigstore

2 posts

SRE & DevOpsHow-To August 9, 2026 3 min read

How to Verify Signed Container Images with Cosign and Policy Controller

A fail-safe Sigstore workflow for signing immutable image digests, constraining identities, enforcing admission policy, and preserving rollback access.

#sigstore#containers#supply-chain

SRE & DevOpsDeep Dive July 12, 2026 5 min read

Container Tags, Digests, SBOMs, and Provenance: Building a Verifiable Release Chain

Why latest is not an identity, how OCI digests anchor releases, and how signatures, attestations, SBOMs, and admission policy work together.

#oci#sbom#sigstore