Beyond container image signing: How we enforce software supply chain policies at Datadog

T1Covered by 1 source · first reported by Docker / HashiCorp / Grafana / Datadog / Honeycomb / Fly.io at 20 Oct, 00:00 UTC

Datadog built Turnstile to evaluate signed attestations and enforce software supply chain policies before container images are deployed.

Sources

• T1Beyond container image signing: How we enforce software supply chain policies at DatadogDocker / HashiCorp / Grafana / Datadog / Honeycomb / Fly.io20 Oct, 00:00