Strengthening Supply Chain Security By Enforcing Policies Using OPA G...
summary
Open Policy Agent Gatekeeper enforces cluster policies using external data providers to validate and mutate images and metadata. It uses a tag-to-digest provider to rewrite image tags to pinned digests, a Cosign signature check provider to deny unsigned images, and a Trivy vulnerability scan provider to return counts (demo shows 30 vulnerabilities on an Alpine image) and set enforcement to warn or deny. AAD-backed mutation adds owner labels to ConfigMaps, and the demo mutations and validations succeed end to end.
AI-written summary · about
chapters (6)
related talks
29mIntroduction to Open Policy Agent
32mUsing Open Policy Agent to Meet Evolving Policy Requirements
40mIntro: Open Policy Agent
05mLightning Talk: A Secure Software Supply Chain for Open Policy Agency (OPA) Policies
41mOpen Policy Agent (OPA) Intro & Deep Dive
33mOpen Policy Agent Deep Dive
40mOPA Introduction & Community Update
17mOpen Policy Agent Intro