hard20 pts · first answer countsdevsecopscontainer-securitysupply-chain

Stopping overwritten release tags

A compromised CI job with push rights to the registry could push a new image over the existing tag api:v3.2.0 that production uses. Which registry setting blocks that?

A.Lifecycle rules that delete untagged images dailyB.Tag immutability, so an existing tag cannot be overwrittenC.Public read access so everyone can check the tagD.Scan-on-push for every new image in the repository

Discussion 0

Join free to post in the discussion.

Stopping overwritten release tags

Discussion 0

Related questions