Skill UI

Comprehensive guide on hardening the open-source Harbor container registry. It details configurations for advanced security features including integrated Trivy vulnerability scanning, Notary/Cosign image signing for content trust, fine-grained RBAC, immutable tag retention, and OIDC authentication. Use this when deploying or auditing a registry to ensure image provenance and compliance.

This guide details how to implement secure, keyless software signing using the Sigstore ecosystem components (Cosign, Fulcio, Rekor). It establishes cryptographic provenance for container images and binaries by binding identity via OIDC, ensuring verifiable integrity and tamper-proofing throughout the CI/CD supply chain.