Signing your container images is a great way to step up the container security game, and make sure your developers and users can trust the container images they receive.
And this is made much easier by GitHub Actions and GitHub Container Registry, which now are compatible with cosign.
In this video we will see how to sign a container image using cosign in GitHub Actions with the support of the GitHub Container Registry (GHCR)
🌟EXCLUSIVE CONTENT🌟
Do you want to access exclusive content, live chats and Q&As, polls, and even 1:1 calls with me? Join my Patreon: [ Ссылка ]
🆘 NEED HELP? 🆘
Book a 1:1 Consultation with CoderDave: [ Ссылка ]
🙏🏻SUPPORT THE CHANNEL🙏🏻
Buy me a coffee: [ Ссылка ]
PayPal me donation: [ Ссылка ]
🎥VIDEOS
► Make Your Docker Build FASTER: [ Ссылка ]
► GitHub Container Registry Introduction: [ Ссылка ]
► SECURE Your Containers: [ Ссылка ]
💬JOIN THE COMMUNITY
► Discord: [ Ссылка ]
► Newsletter: [ Ссылка ]
► Blog: [ Ссылка ]
► GitHub: [ Ссылка ]
► Twitter: [ Ссылка ]
► Facebook: [ Ссылка ]
⏲TIMESTAMPS
0:00 Why you need to sign a container image
0:59 The tools: Sigstore, Cosign, GHCR
2:08 Let's generate the keys
3:40 Keys for GitHub
5:00 Giveaway winner announcement
5:25 Setup Cosign with GitHub Actions
7:37 Verify a container signature
8:31 Adding metadata to a container signature
9:53 Cosign GitHub starter workflow
11:19 Final Considerations
🎤PODCAST: [ Ссылка ]
❓QUESTIONS?
Have a question about DevOps, Cloud, Coding, or Anything Else? Post in comments section of this video!
🔴SUBSCRIBE to CoderDave here: [ Ссылка ]
_______________
👕Get my MERCH: [ Ссылка ]
🔮TOOLS I USE
► Twingate - Connect to your Private Resources SECURELY: [ Ссылка ]
► TubeBuddy - #1 YouTube channel Management tool (FREE): [ Ссылка ]
► Moosend - Free Newsletter and Automation Platform: [ Ссылка ]
📸🖥️GEAR AND SOFTWARE
► Music - Epidemic Sound (Get 30 days free): [ Ссылка ]
► Editing - Adobe Premiere Pro: [ Ссылка ]
► Gear I Use for YouTube: [ Ссылка ]
► Gear I Use for Streaming: [ Ссылка ]
► My Computer Setup: [ Ссылка ]
► Full office setup: [ Ссылка ]
Disclaimer:
Some product links are affiliate links which means if you buy something I'll receive a small commission at no additional cost to you.
As an Amazon Associate, I earn from qualifying purchases.
