Is Your Kubernetes Cluster Pulling Malicious Images Right Now?

The "Oh Shit" Moment You deploy registry.k8s.io/kube-scheduler:v1.36.0 today. It works, you move on. Tomorrow, someone with push access to that tag points it at a different image. Maybe an attacker wi