Topic: sigstore

2026

1. August 17, 202617 min read

   Kubernetes security in production · 03/04

   Supply chain security: Sigstore, SBOM, admission control

   Kubernetes verifies no image signature on its own. Signing with Sigstore, inventorying with an SBOM, refusing at admission — and what each of those verbs actually covers.