You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
They mention two options for security vulnerability attestations, Kritis and Voucher.
I noticed that Kritis might not be maintained anymore (grafeas/kritis#632)
Is Voucher is still maintained?
The README of this project mentions: "Binary authorization uses an admission controller such as Kritis", does Voucher use Kritis?, or are these totally separate?
The text was updated successfully, but these errors were encountered:
Shopify replaced Voucher with a system that wraps https://github.com/kyverno/kyverno/ policies to produce binary authorization attestations. We like how other admission controllers provide a general "policy" abstraction for us, so we shifted to wrapping an admission controller to produce our binauthz attestations.
We like how this prevents coupling to GKE - we could run the same policies using Kyverno directly as an admission controller.
I got to this project following the Google documentation about Binary Authorization:
https://cloud.google.com/binary-authorization/docs/creating-attestations-voucher
They mention two options for security vulnerability attestations, Kritis and Voucher.
I noticed that Kritis might not be maintained anymore (grafeas/kritis#632)
Is Voucher is still maintained?
The README of this project mentions: "Binary authorization uses an admission controller such as Kritis", does Voucher use Kritis?, or are these totally separate?
The text was updated successfully, but these errors were encountered: