tag

#supply-chain

2 posts

SRE & DevOpsHow-To August 9, 2026 3 min read

How to Verify Signed Container Images with Cosign and Policy Controller

A fail-safe Sigstore workflow for signing immutable image digests, constraining identities, enforcing admission policy, and preserving rollback access.

#sigstore#containers#supply-chain

SRE & DevOpsDeep Dive July 9, 2026 6 min read

Container Image Vulnerabilities: Scanning, CVEs, and Supply Chain Risk

How vulnerability scanners actually inspect container image layers, how to read a scan report, and the practices that reduce real supply-chain risk.

#security#containers#vulnerabilities