Below you will find pages that utilize the taxonomy term “cupofpython”
March 4, 2026
Verify Base Image Signatures
Version updated for https://github.com/cupofpython/integrity-check to version v1.0.0.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary The “Integrity Check” GitHub Action automates the validation of Dockerfile base image integrity by verifying the presence of cryptographic signatures from trusted signers, as defined in a policy file. It ensures the authenticity of base images used in build pipelines, enhancing security and compliance by detecting untrusted or unsigned images.