# sigstore policy controller

Published articles for sigstore policy controller.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Five Challenges of Verifying Container Signatures at Deployment Time in Kubernetes

DevFeed: [Five Challenges of Verifying Container Signatures at Deployment Time in Kubernetes](<https://devfeed.tech/articles/so-you-want-to-check-image-signatures-in-kubernetes-13235.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/so-you-want-to-check-image-signatures-in-kubernetes>)

Published: 2023-07-06T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Security](<https://devfeed.tech/topics/security.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [container](<https://devfeed.tech/tags/container.md>), [container-image](<https://devfeed.tech/tags/container-image.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [policy-controller](<https://devfeed.tech/tags/policy-controller.md>), [security](<https://devfeed.tech/tags/security.md>), [security-policy-platform](<https://devfeed.tech/tags/security-policy-platform.md>), [signing](<https://devfeed.tech/tags/signing.md>), [signing-containers](<https://devfeed.tech/tags/signing-containers.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [software-signatures](<https://devfeed.tech/tags/software-signatures.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [webhooks](<https://devfeed.tech/tags/webhooks.md>)

### AI overview

This article explains five challenges involved in verifying container signatures during Kubernetes deployment. It focuses on admission webhooks, locating containers across resource types, handling ephemeral containers and custom resource definitions, and maintaining logic as Kubernetes APIs change.

### Source excerpt

Learn about five challenges you might encounter when trying to verify container signatures at deployment time in Kubernetes.

## Chainguard open sources new policy catalog for Sigstore policy-controller

DevFeed: [Chainguard open sources new policy catalog for Sigstore policy-controller](<https://devfeed.tech/articles/chainguard-open-sources-new-policy-catalog-for-sigstore-policy-controller-12974.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-open-sources-new-policy-catalog-for-sigstore-policy-controller>)

Published: 2023-04-18T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [sigstore policy controller](<https://devfeed.tech/topics/sigstore-policy-controller.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [rego](<https://devfeed.tech/topics/rego.md>), [YAML](<https://devfeed.tech/topics/yaml.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [rego](<https://devfeed.tech/tags/rego.md>), [secure-software](<https://devfeed.tech/tags/secure-software.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [trust](<https://devfeed.tech/tags/trust.md>), [verification](<https://devfeed.tech/tags/verification.md>), [yaml](<https://devfeed.tech/tags/yaml.md>)

### AI overview

Chainguard open sources a policy catalog for Sigstore policy-controller. The catalog provides policies that organizations and open source projects can adopt incrementally to improve software supply-chain security, with community contributions supported.

### Source excerpt

To help unlock benefits of the Sigstore policy-controller, Chainguard open sources a policy catalog that can be adopted to improve your supply chain security.

## ICYMI: What's new in Chainguard Academy

DevFeed: [ICYMI: What's new in Chainguard Academy](<https://devfeed.tech/articles/icymi-what-s-new-in-chainguard-academy-13099.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/icymi-whats-new-in-chainguard-academy>)

Published: 2023-04-03T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [open-source-security](<https://devfeed.tech/topics/open-source-security.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [openvex](<https://devfeed.tech/topics/openvex.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-academy](<https://devfeed.tech/tags/chainguard-academy.md>), [chainguard-enforce](<https://devfeed.tech/tags/chainguard-enforce.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [openvex](<https://devfeed.tech/tags/openvex.md>), [sbom](<https://devfeed.tech/tags/sbom.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [software-education](<https://devfeed.tech/tags/software-education.md>), [software-security-practices](<https://devfeed.tech/tags/software-security-practices.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

Chainguard Academy has expanded to more than 300 tutorials, documentation pages, and reference materials covering open source projects and Chainguard products. The article highlights resources for Chainguard Images and Wolfi Images, OpenVEX, SBOMs, and Sigstore policy-controller.

### Source excerpt

See what's new in Chainguard Academy to help you level up your software supply chain and open source security knowledge.

## Sigstore policy-controller 101

DevFeed: [Sigstore policy-controller 101](<https://devfeed.tech/articles/sigstore-policy-controller-101-13232.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/sigstore-policy-controller-101>)

Published: 2023-03-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [sigstore policy controller](<https://devfeed.tech/topics/sigstore-policy-controller.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Kubernetes admission controller](<https://devfeed.tech/topics/kubernetes-admission-controller.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [cicd](<https://devfeed.tech/tags/cicd.md>), [cloud-native](<https://devfeed.tech/tags/cloud-native.md>), [cluster-security](<https://devfeed.tech/tags/cluster-security.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [getting-started](<https://devfeed.tech/tags/getting-started.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [kubernetes-clusters](<https://devfeed.tech/tags/kubernetes-clusters.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [signing-containers](<https://devfeed.tech/tags/signing-containers.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

### AI overview

This tutorial introduces Sigstore policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard. It explains how to install the controller in a local kind cluster and configure declarative policies for trusted registries, signed images, and other container conditions.

### Source excerpt

Chainguard breaks down the benefits of Sigstore's policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard.