smazzone/image-signing

This repo contains a series of artifacts to demo how to sign off a container image to an OCI registry, how to perform a signature verification in a k8s cluster, how to block signed images in a specific namespace and how to allow but warn on other namespaces, how to notify of blocked or noncompliant images via APIs calls

HCL