Project · Go · MIT
imagegate active
A Docker authorization plugin that refuses to create a container unless its image is cosign-signed by an identity you trust and carries a signed SBOM.
imagegate runs on the host next to dockerd, so Dockerfiles, Compose files and docker run commands stay exactly as they are. A container starts only if its image digest has a cosign signature from a trusted identity and a signed SPDX or CycloneDX SBOM attestation.
- Verifies by digest. Tags resolve through dockerd to the digest it will actually run.
- Real Sigstore, keyless or with your own keys, including cosign v3 bundles.
- Can’t lock you out. Only container create, start and restart are ever denied; every other call passes, even on errors.
- Built for rollout: audit mode, expiring break-glass overrides, a JSON audit log and Prometheus metrics.
Packages for Debian, Fedora and Alpine are on the releases page. Read the lockout runbook before enabling it.