Docker image signing
Open
enhancement ✨
feature
security
- Dominant language
- Python
- Stars
- 37
- Forks
- 9
- PR merge metrics
- No merged PRs in 30d
Description
Implement Docker image signing before uploading artifacts to Docker Hub so the users could validate that the images are coming from us. This would add to the software supply chain security.
- [ ] Signing
- [ ] CI/CD
- [ ] Documentation
### Resources
- https://docs.docker.com/engine/security/trust/
- https://www.howtogeek.com/devops/how-to-sign-your-docker-images-to-increase-trust/
Contributor guide
Assessment
This issue has not been assessed yet.