Azure DevOps: prove artifact provenance before production promotion
A production runbook for tying an Azure DevOps artifact to its source, build run, digest and approval before promotion, quarantine or rollback.
Read article
Tag
supply-chain
5 articles connected to this technical signal.
Azure Container Registry: migrate Docker Content Trust to Notation without opening the delivery chain
A production runbook for inventorying Docker Content Trust, dual-signing with Notation, validating digests, and cutting over CI/CD gates with an explicit rollback.
Read articleGitHub Actions: prove artifact provenance before production deployment
A production runbook for tying commit, workflow, digest, attestation, approval and Azure identity together before promoting a GitHub Actions artifact.
Read articleAzure ACR and AKS: verify an image signature before production promotion
A production runbook for pinning an ACR digest, verifying its Notation signature, scoping trust policy, promoting by digest, and rolling back without disabling provenance controls.
Read articleAzure ACR and AKS: contain a vulnerable image digest before redeployment
A production runbook for mapping an ACR vulnerability signal to AKS pods, freezing promotion, returning to a known digest, validating the rollout, then retaining or deleting the suspect image.
Read article