An in-depth look at SBOM and build provenance Docker image attestation created by Docker/BuildKit, and the major problem of lacking verifiability.| AugmentedMind.de
Learn how Cosign creates Docker image signing (and attestations, such as SBOMs) and how to automatically verify them, e.g. in Kubernetes.| AugmentedMind.de