# sigstore policy controller

Sigstore Policy Controller is a Kubernetes admission controller that enforces policy using verifiable supply-chain metadata from cosign and validates container-image signatures and attestations.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Chainguard open sources new policy catalog for Sigstore policy-controller

DevFeed: [Chainguard open sources new policy catalog for Sigstore policy-controller](<https://devfeed.tech/articles/chainguard-open-sources-new-policy-catalog-for-sigstore-policy-controller-12974.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-open-sources-new-policy-catalog-for-sigstore-policy-controller>)

Published: 2023-04-18T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [sigstore policy controller](<https://devfeed.tech/topics/sigstore-policy-controller.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [rego](<https://devfeed.tech/topics/rego.md>), [YAML](<https://devfeed.tech/topics/yaml.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-security](<https://devfeed.tech/tags/kubernetes-security.md>), [rego](<https://devfeed.tech/tags/rego.md>), [secure-software](<https://devfeed.tech/tags/secure-software.md>), [security](<https://devfeed.tech/tags/security.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [trust](<https://devfeed.tech/tags/trust.md>), [verification](<https://devfeed.tech/tags/verification.md>), [yaml](<https://devfeed.tech/tags/yaml.md>)

### AI overview

Chainguard open sources a policy catalog for Sigstore policy-controller. The catalog provides policies that organizations and open source projects can adopt incrementally to improve software supply-chain security, with community contributions supported.

### Source excerpt

To help unlock benefits of the Sigstore policy-controller, Chainguard open sources a policy catalog that can be adopted to improve your supply chain security.

## Sigstore policy-controller 101

DevFeed: [Sigstore policy-controller 101](<https://devfeed.tech/articles/sigstore-policy-controller-101-13232.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/sigstore-policy-controller-101>)

Published: 2023-03-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [sigstore policy controller](<https://devfeed.tech/topics/sigstore-policy-controller.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Kubernetes admission controller](<https://devfeed.tech/topics/kubernetes-admission-controller.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [cicd](<https://devfeed.tech/tags/cicd.md>), [cloud-native](<https://devfeed.tech/tags/cloud-native.md>), [cluster-security](<https://devfeed.tech/tags/cluster-security.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [getting-started](<https://devfeed.tech/tags/getting-started.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [kubernetes-clusters](<https://devfeed.tech/tags/kubernetes-clusters.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [signing-containers](<https://devfeed.tech/tags/signing-containers.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

### AI overview

This tutorial introduces Sigstore policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard. It explains how to install the controller in a local kind cluster and configure declarative policies for trusted registries, signed images, and other container conditions.

### Source excerpt

Chainguard breaks down the benefits of Sigstore's policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard.