George Ezejiofor breaks down building a zero-trust CI/CD supply chain on RKE2, wiring Tekton, Cosign, Harbor & Kyverno so the cluster refuses unsigned images. Essential read on real-world SLSA compliance:
tektoncd
@tektoncdTwitter account for the Tekton project: github.com/tektoncd
