A container registry that stores images without enforcing security requirements is a passive artifact store. Images flow in through automated pipelines and developer pushes; images flow out to cluster pull requests; nothing in between validates whether the images in the store meet any security standard. This architecture is the norm, not the exception. Registries in […]