#cosign

Unsigned images meet an autonomous puller. What could go wrong.

The New Stack argues unsigned container images have always been a risk and become a bigger one when the puller is an AI agent with no human in the loop. The fix, image signing, has been on the shelf for years.