Tag

cosign

0 views collected around this technical thread.

Linux Ops Smart Journey

Sep 1, 2024 · Information Security

Secure Container Images: Integrate Cosign with Harbor

This guide explains how to enhance container image security by installing Cosign, generating key pairs, signing images, and configuring Harbor to trust the signatures, including step‑by‑step commands and parameter details for seamless integration of Cosign into Harbor's registry.

Container SecurityHarborcloud native

0 likes · 7 min read

Secure Container Images: Integrate Cosign with Harbor

Efficient Ops

Aug 20, 2024 · Information Security

Building a One‑Person PCI DSS Image‑Signing Service and Surviving a P0 Outage

This article recounts how a solo developer built a Django‑based Docker image signing service to meet PCI DSS requirements, faced two severe incidents—including a 17.5‑hour P0 outage caused by concurrency limits and a misconfigured Rekor service—and shares the operational lessons learned for reliable SRE practice.

DjangoPCI DSSSRE

0 likes · 9 min read

Building a One‑Person PCI DSS Image‑Signing Service and Surviving a P0 Outage