Skip to content

scan: add container image signing check#39

Closed
weedorflow wants to merge 1 commit intoaanishs:mainfrom
weedorflow:add-container-image-signing
Closed

scan: add container image signing check#39
weedorflow wants to merge 1 commit intoaanishs:mainfrom
weedorflow:add-container-image-signing

Conversation

@weedorflow
Copy link
Copy Markdown
Contributor

Summary

  • register a new container-image-signing code-grep check for signed image verification signals
  • map the check to SI-7 so it contributes to integrity scoring
  • add framework tests to lock the registry entry and binding in place

Closes #11

Testing

  • bun test test/framework.test.ts

@aanishs
Copy link
Copy Markdown
Owner

aanishs commented Mar 30, 2026

Incorporated in ae6dde1 on main (rebased after #41 landed). Thank you @weedorflow!

@aanishs aanishs closed this Mar 30, 2026
aanishs added a commit that referenced this pull request Mar 30, 2026
…kup retention

Incorporates #38, #39, #40 (rebased onto main after #41 landed):
- azure-keyvault-rotation check → SC-28
- container-image-signing check → SI-7
- RDS backup retention threshold 7→35 days, rego-aws-rds-backup-retention → CP-9
- 158 tests (up from 152)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add scan check: container image signing verification

2 participants