Making the Internet more secure one signed container at a time(security.googleblog.com)

security.googleblog.com

Making the Internet more secure one signed container at a time

https://security.googleblog.com/2021/05/making-internet-more-secure-one-signed.html

1 comments

So maybe I’m a little lost, but how does this differ from content trust beyond being for more than docker?

Also — can the signature be uploaded to any registry or does that registry need to include a notary?