Software supply chain security – Binary Authorization & Cloud Build

Joseph Paturi posted: " In the last post, we saw the details of the binary authrorisation and how it works using an example policy. This is the follow-up post with a very simple demonistration. today we see how you can use 'cloud build' as an attestor for binary authorisation " Respond to this post by replying above this line New post on Joseph's Cloud Notes Software supply chain security – Binary Authorization & Cloud Build by Joseph Paturi Cloud Build automatically creates the built-by-cloud-build attestor in your project when you run a build that generates images. After images are successfully built, Cloud Build automatically signs and creates attestations for them. At deploy time, Binary Authorization verifies the attestations with the built-by-cloud-build attestor. Read more of this post Joseph Paturi | 28 Mar 2022 at 17:27 | Tags: binary authorisation, cloud build, Google Cloud, Software-Supply-Chain | Categories: Application-Modernization, Cloud Computing, Google Cloud, Software-Supply-Chain | URL: https://wp.me/paCsZT-kX Comment    See all comments Unsubscribe to no longer receive posts from Joseph's Cloud Notes. Change your email settings at Manage Subscriptions. Trouble clicking? Copy and paste this URL into your browser: https://josephcloudnotes.wordpress.com/2022/03/28/software-supply-chain-security-binary-authorization-cloud-build/ Thanks for flying with WordPress.com