opa-image-security-templates - Container Image Security Policies for Kubernetes
Enforce container registry allowlists, digest enforcement, and signature verification in Kubernetes
Tags
Updated: 2026-02-14Capabilities
Typical Inputs
Typical Outputs
What this skill does
- block public registries
- enforce digest references
- reject vulnerable images
- validate cryptographic signatures
Inputs
- Kubernetes cluster
- container images
- vulnerability scan results
- cryptographic signatures
- trusted registries
Outputs
- enforced security policies
- blocked image deployments
- policy validation results
Requirements
- Open Policy Agent (OPA)
- Kubernetes environment