Runtime Supply Chain Verification using the Node Resource Interface (NRI)

The widely used container supply chain verification tools today operate at the Kubernetes API layer as admission webhooks (such as Kyverno, OPA Gatekeeper, and Sigstore Policy Controller). They...