Signing Container Images with Cosign (and Notation) + Storing Signatures, SBOMs, and Attestations in Azure Container Registry

7 minute read Software Engineering, Security

Signing container images is one of the highest-leverage things you can do to improve your software supply chain. A signature gives you a cryptographic way to...

Containers, OCI, Supply Chain, Sigstore, Cosign, Notary, Notation, ACR, SBOM, Attestations