# imagegate

> A Docker authorization plugin that refuses to create a container unless its image is cosign-signed by an identity you trust and carries a signed SBOM.

- URL: https://rossedman.io/projects/imagegate/

`imagegate` runs on the host next to dockerd, so Dockerfiles, Compose files and `docker run` commands stay exactly as they are. A container starts only if its image digest has a cosign signature from a trusted identity **and** a signed SPDX or CycloneDX SBOM attestation.

- **Verifies by digest.** Tags resolve through dockerd to the digest it will actually run.
- **Real Sigstore**, keyless or with your own keys, including cosign v3 bundles.
- **Can't lock you out.** Only container create, start and restart are ever denied; every other call passes, even on errors.
- **Built for rollout**: audit mode, expiring break-glass overrides, a JSON audit log and Prometheus metrics.

Packages for Debian, Fedora and Alpine are on the [releases page](https://github.com/rossedman/imagegate/releases). Read the [lockout runbook](https://rossedman.io/imagegate/runbook/) before enabling it.