---
title: "Discussion on \"CoSign with Kubernetes: Ensure integrity of images before deployment\" | Hashnode"
description: "Discussion on \"CoSign with Kubernetes: Ensure integrity of images before deployment\". Notary vs CoSign? Is CoSign a good alternative? Can we automate keys & signature rotation?"
url: "https://hashnode.com/posts/cosign-with-kubernetes-ensure-integrity-of-images-before-deployment/61e0656ecb0ca175a18dc90d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [CoSign with Kubernetes: Ensure integrity of images before deployment](https://blog.rewanthtammana.com/cosign-with-kubernetes-ensure-integrity-of-images-before-deployment?utm_source=hashnode&utm_medium=feed)

Notary vs CoSign? Is CoSign a good alternative? Can we automate keys & signature rotation?

Jan 13, 2022 · 6 min read · blog.rewanthtammana.com  
Updated Jan 15, 2022  
Read the article

-   [#kubernetes](https://hashnode.com/tag/kubernetes)
-   [#go](https://hashnode.com/tag/go)
-   [#security](https://hashnode.com/tag/security)
-   [#validation](https://hashnode.com/tag/validation)
-   [#continuous-integration](https://hashnode.com/tag/continuous-integration)

## Written by

[Rewanth Tammana](https://hashnode.com/@rewanthtammana)

@rewanthtammana

  
[View profile](https://hashnode.com/@rewanthtammana)

Curiosity is the key to enhancement

Rewanth Tammana is a security ninja, open-source contributor, and a full-time freelancer. Previously, Senior Security Architect at Emirates NBD (National Bank of Dubai). He is passionate about DevSecOps, Cloud, and Container Security. He added 17,000+ lines of code to Nmap (famous as Swiss Army knife of network utilities). Holds industry certifications like CKS (Certified Kubernetes Security Specialist), CKA (Certified Kubernetes Administrator), etc. Rewanth speaks and delivers training at international security conferences worldwide including Black Hat, Defcon, Hack In The Box (Dubai and Amsterdam), CRESTCon UK, PHDays, Nullcon, Bsides, CISO Platform, null chapters and multiple others. He was recognized as one of the MVP researchers on Bugcrowd (2018) and identified vulnerabilities in several organizations. He also published an IEEE research paper on an offensive attack in Machine Learning and Security. He was also a part of the renowned Google Summer of Code program.

## Responses 1

Markdown supported · ⌘↵ to post

[Steve Lasker](https://hashnode.com/@SteveLasker)

[Jan 14, 2022](https://hashnode.com/posts/cosign-with-kubernetes-ensure-integrity-of-images-before-deployment/61e0656ecb0ca175a18dc90d/comment/61e1d9eed546507ab03435a4)

Hi Rewanth, Thanks for the write-up as we're all looking to help users find secure solutions. Just a quick note that you're comparing Notary v1. Notary v2 was created, due to the limitations you've outlined. Which cosign chose to follow a subset of these requirements. Please see the scenarios and goals being implemented with Notary v2 for a current comparison. github.com/notaryproject/notaryproject/blob/main/requirements.md A walkthrough of Notary v2, with Kubernetes is available here: [github.com/Azure/notation-azure-kv/blob/main/docs…](https://github.com/Azure/notation-azure-kv/blob/main/docs/nv2-sign-verify-aks.md) Or, this post from Lachie: [medium.com/@LachlanEvenson/container-signing-with…](https://medium.com/@LachlanEvenson/container-signing-with-notary-v2-13dd425e95d6)

[Rewanth Tammana](https://hashnode.com/@rewanthtammana)

[Jan 15, 2022](https://hashnode.com/posts/cosign-with-kubernetes-ensure-integrity-of-images-before-deployment/61e0656ecb0ca175a18dc90d/comment/61e1d9eed546507ab03435a4#reply-61e281a71f35f37864468f38)

Thanks for the heads up, Steve. I will learn about Notary v2 scenarios & goals.