ARCHITECT
FEATURED ANALYSIS
Runtime Supply Chain Verification using the Node Resource Interface (NRI)
BY
Sascha Grunert
SOURCE
Cloud Native Computing Foundation
DATE
READ
1 min read
The widely used container supply chain verification tools today operate at the Kubernetes API layer as admission webhooks (such as Kyverno, OPA Gatekeeper, and Sigstore Policy Controller). They intercept pod creation, …
The widely used container supply chain verification tools today operate at the Kubernetes API layer as admission webhooks (such as Kyverno, OPA Gatekeeper, and Sigstore Policy Controller). They intercept pod creation, check signatures and attestations, and…