Docker and CI/CD · Senior · Question 10 of 75
What do image signing tools like Sigstore cosign add to a pipeline?
- 1Encryption of image layers so nobody else can read them
- 2Compression that makes signed images smaller to pull
- ✓Correct answer: Proof of who built an image, checked before it runs
Explanation
CI signs the digest (keyless with OIDC identities), and an admission controller rejects unsigned or wrongly signed images in the cluster.