Integration > Container Signing
Container Signing
Container image signing (via tools such as Sigstore’s cosign) attaches a verifiable signature to a container image so its origin and integrity can be confirmed before deployment.
Use Cases
Sign and verify container images to keep unsigned or tampered images out of production.
Signature-Backed Images
Produces a separate signature artifact that accompanies the image in the registry.
Deploy-Time Enforcement
Enforces that only signed images can be deployed via a Kubernetes Validating Webhook.
HSM-Protected Keys
Keeps container-signing keys secured in an HSM with centralized audit logging.
Integrations and Resources
CodeSign Secure
Container Signing
Signs container images and enforces signature verification before deployment.