Beyond Image Scanning: Building a Trusted Container Supply Chain on AWS with SBOMs and Signing

Every container image carries an implicit trust boundary. A single FROM statement can pull in hundreds of OS packages, language runtimes…