Sign. Verify. Protect. Making sure your software is what it claims to be.
Learn more at https://sigstore.dev/
Sign. Verify. Protect. Making sure your software is what it claims to be.
Learn more at https://sigstore.dev/
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.