Preprint
Aug 2026
Improving the Security of Containerized Workloads using Transparency and Traceability Services
This paper presents an architecture for verifiable container image distribution that addresses key-management challenges and enables policy-enforced admission-time verification, and implements a proof-of-concept integrated with GitHub Actions and GitLab Runners that mitigates common supply-chain attacks under a realistic threat model.
N. Fotiou, Lefteris Georgiadis, Ignacio Lacalle et al.
· 0 citations