From 1debaaf02c0655b4abbf1cf5dc93fff4e0a983e1 Mon Sep 17 00:00:00 2001 From: hirokuni-kitahara Date: Wed, 10 Jan 2024 16:42:29 +0900 Subject: [PATCH] update README Signed-off-by: hirokuni-kitahara --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 7de03b0..93104a0 100644 --- a/README.md +++ b/README.md @@ -139,6 +139,13 @@ of the downloaded artifacts and ensure that the binary's code really comes from To do so, please follow the instructions [here](https://github.com/slsa-framework/slsa-github-generator#verification-of-provenance). +### Kyverno Integration +[Kyverno](https://main.kyverno.io/) is an open-source policy engine designed for Kubernetes resources. + +It has the built-in feature to verify signed Kubernetes YAML manifests created with k8s-manifest-sigstore project. + +Please refer to the [document](https://main.kyverno.io/docs/writing-policies/validate/#manifest-validation) for more details. + ## Security Should you discover any security issues, please refer to sigstore'ss [security