Code signing and transparency for containers and binaries

Linux Runtime Security and Forensics using eBPF

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.