2026
A cryptographically verified approach to secure Docker container updates in CI/CD pipelines
A secure CI/CD update workflow that combines keyless Cosign signing (OIDC/Fulcio), immutable SHA-256 digest–based image addressing, mandatory pre-deployment signature verification, and freshness controls against rollback attacks is presented, while permitting controlled rollback only to previously verified versions.
Vitaliy Tymoshchuk, Dmytro Tymoshchuk, Mykola Mytnyk et al.
· CSDP · 0 citations