Artifact signing is one question. JRush Episode 7 goes much further: SBOMs, provenance, buildpacks, hardened images, CVE response, and the practical trade-offs between them.
Plenty to take back to your pipeline.
Episode: www.youtube.com/live/AsGmInC...
Checklist: jrush.bell-sw.com/container-se...
