Elastic Stack container images signed with Sigstore!

Software supply chain attacks keep increasing. That's why this topic is a top priority for security leaders.

In that regard, this blog post highlights a new capability of signing the Elastic Stack container images with Sigstore to:

• Secure the Elastic Software Supply Chain workflow
• Provide an easy and standard way for Elastic users to verify the provenance of the Elastic container images before deploying them to any infrastructure and therefore protect against supply chain attacks
• Meet regulatory and compliance …

check claims command critical docker elastic elasticsearch identity json key log payload public public key results signature signatures transparency verification verified