k8s-supply-chain-and-image-hardening

【部署与运维】Use when hardening the container image and enforcing supply-chain integrity for a Kubernetes workload after security and operations have decided the image-trust, scanning, and provenance posture. Produces minimal non-root read-only-root-FS images with dropped capabilities, image signing (cosign), SBOM generation (Syft), vulnerability scanning (Trivy/…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准