Skip to content

feat(lab8): cosign sign + SBOM/provenance attestations + blob signing#1417

Open
kvakz wants to merge 22 commits into
inno-devops-labs:mainfrom
kvakz:feature/lab8
Open

feat(lab8): cosign sign + SBOM/provenance attestations + blob signing#1417
kvakz wants to merge 22 commits into
inno-devops-labs:mainfrom
kvakz:feature/lab8

Conversation

@kvakz

@kvakz kvakz commented Jul 3, 2026

Copy link
Copy Markdown

Goal: lab 8 done

Changes:
labs/lab8/keys/cosign.pub
submissions/lab8.md

  • Task 1 — Image signed + tamper demo (both shown)
  • Task 2 — SBOM + provenance attestations attached and verified
  • Bonus — Blob signed + verify-blob success + tamper failure
  • Title is clear (feat(labN): <topic> style)
  • No secrets/large temp files committed
  • Submission file at submissions/labN.md exists

kvakz and others added 22 commits June 12, 2026 17:38
feat/lab1: establish core PR template structure
feat/lab1: secure GitHub Actions smoke test workflow
feat(lab2): Threagile threat model + secure variant + auth flow
feat(lab4): juice-shop SBOM + Grype/Trivy comparison + sign-ready att…
feat(lab6): Checkov + KICS scans + custom policy
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant