Zero-Trust CI/CD Pipelines: Enforcing SLSA Level 3, Ephemeral Kube-Runners, and Keyless Sigstore Attestation
Eliminate static credentials and supply chain vulnerabilities by orchestrating ephemeral Kubernetes runners, AWS OIDC federation, Cosign keyless signing, and Kyverno admission controls.