Adapt Image Attestation For Free

An attestation is a digital document that certifies an image. During deployment, Binary Authorization verifies the attestation before it allows the image to be deployed. The process of creating an attestation is sometimes called signing an image. An attestation is created after an image is built.

Binary Authorization is a service on Google Cloud that provides software supply-chain security for container-based applications. It enables you to configure a policy that the service enforces when an attempt is made to deploy a container image on one of the supported container-based platforms.

An attestation service is responsible for assessing the integrity of cloud compute nodes through techniques introduced by the trusted computing technology and trusted platform modules (TPMs). The TPM creates a hash of a boot component and validates the hash against a set of securely stored values.

Kritis Signer is an open source command-line tool that can create Binary Authorization attestations based on a policy that you configure. You can also use Kritis Signer to create attestations after checking an image for vulnerabilities identified by Container Analysis.

Binary Authorization for Google Kubernetes Engine (GKE) pricing. Pricing for Binary Authorization for GKE is $0.01613 per cluster per hour (charged in 1 second increments). This is around $12/month and is in addition to all other fees charged by the GKE cluster.

Binary Authorization helps DevOps teams implement a proactive container security posture by ensuring only verified containers are admitted into the environment and that they remain trusted during runtime.

I do hereby attest that this information is true, accurate and complete to the best of my knowledge and I understand that any falsification, omission, or concealment of material fact may subject me to administrative, civil, or criminal liability.?