Wiz Adds Kubernetes Controls to Verify Container Image Integrity
Summary
Wiz says its admission controller can verify container image signatures and trusted sources, block unverified images from Kubernetes deployments, and provide event context to help investigate suspicious deployment attempts.
Key points
- Wiz announced general availability of image-integrity validation through its admission controller.
- The feature is designed to verify image signatures and origins, including for organizations using Cosign or Notary.
- Policies can block unverified images or images from sources that are not trusted.
- Wiz says teams can centrally define which developers and teams are authorized to deploy images.
- The controller records successful and failed deployment attempts and can alert on unauthorized or abnormal activity.
Article Details
- Event Type
- Wiz announced general availability of container image integrity validation through the Wiz admission controller.
- Impact
- Customers can verify container image signatures and origins, restrict deployments to trusted sources, block unverified images in Kubernetes environments, and review or receive alerts about unauthorized or abnormal deployment attempts. The article describes product capabilities; it does not report a specific attack or incident.
Vendors
Products
Wiz Admission ControllerWiz is proud to announce the general availability of image integrity validation using the Wiz admission controller, becoming the first CNAPP solution to provide these supply chain security capabilities. Customers canWiz CLIWiz offers complete protection of the container supply chain, from code creation and build via the Wiz CLI, to image storage via scanning of container registries, to deployment via the admission controller, andWiz Guardrailsfirst CNAPP solution to provide these supply chain security capabilities. Customers can now extend Wiz Guardrails into their software supply chain to ensure that only signed or trusted images can be deployed. ThisWiz Security GraphThreat detection automation : Get alerted in real-time to unauthorized or abnormal activity in your environments and use the context of the Wiz Security Graph to rapidly contain an unfolding threat.
Tools
CosignCustomers who have already set up container image signing processes using Cosign or Notary, or who would like to implement them, can now use Wiz to enforce container image verification. With just a few clicks, integrityNotaryCustomers who have already set up container image signing processes using Cosign or Notary, or who would like to implement them, can now use Wiz to enforce container image verification. With just a few clicks, integrity