# Vouching for Docker Images

DevFeed: [Vouching for Docker Images](<https://devfeed.tech/articles/vouching-for-docker-images-1670.md>)

Original publisher: [Read original article](<https://shopify.engineering/voucher-docker-images>)

Author: Cat Jones

Published: 2020-12-01T15:00:01Z

Content type: article

Language: en

Sources: [Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering.md>), [Shopify Engineering - Shopify Engineering](<https://devfeed.tech/sources/shopify-engineering-shopify-engineering.md>)

Topics: [Docker](<https://devfeed.tech/topics/docker.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Security, Privacy and Abuse Prevention](<https://devfeed.tech/topics/security-privacy-and-abuse-prevention.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [containers](<https://devfeed.tech/tags/containers.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-images](<https://devfeed.tech/tags/docker-images.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [verification](<https://devfeed.tech/tags/verification.md>)

## AI overview

The article explains how code signing and Binary Authorization can protect Docker images from tampering and malicious software in Kubernetes environments. It introduces Voucher, an open source Shopify project intended to apply these protections without requiring developers to learn cryptography.

## Source excerpt

If you were using computers in the '90s and the early 2000s, you probably had the experience of installing a piece of software you downloaded from the internet, only to discover that someone put some nasty into it, and now you're dragging your computer to IT to beg them to save your data. To remedy this, software developers started "signing" their software in a way that proved both who they were and that nobody tampered with the software after they released it.