Generate an SBOM in GitLab CI, sign the image digest with cosign, attach the SBOM as an attestation, and make Kyverno refuse anything unsigned. Plus an honest read of which SLSA level 3 requirements a GitLab runner meets.
Learn how to integrate Trivy container scanning into GitLab CI. Find vulnerabilities before they reach production.
Automate semantic versioning in GitLab CI using conventional commits. Generate changelogs and release tags automatically.
Complete guide to GitLab CI/CD for Kubernetes deployments. Build containers, scan for vulnerabilities, and deploy to clusters with GitOps.