#continuous-integration

CoSign with Kubernetes: Ensure integrity of images before deployment

Notary vs CoSign? Is CoSign a good alternative? Can we automate keys & signature rotation?