Security – Germán M. Yébenes

Integrate Image Scanning with GitHub Actions

Introduction GitHub Actions is an automation tool that helps developers design their workflows by automating tasks, allowing the implementation of CI/CD directly from within the Github repositories. Security is essential when managing production applications to protect data, prevent unauthorized access, and maintain the application integrity, integrating image scanning into the CI/CD process is not just…
Read more: Integrate Image Scanning with GitHub Actions
Security supply chain through image verification and signature in Kubernetes

Introduction Image signature verification is an important step if you want to deploy applications securely on Kubernetes clusters. It allows customers to ensure no unexpected or malicious changes affect the images along the entire CI/CD flow. Images stored in a registry can be signed using several tools like the Notary Server and the Cosign/Sigstore, both…
Read more: Security supply chain through image verification and signature in Kubernetes

Category: Security