Great practical perspective on connecting Go builds, Cosign/SLSA, Kubernetes admission, and GitOps into one verifiable pipeline.
go
dev.to
Artifact Immutability as a Release Safety Primitive: Go Binary Signing, Digest Pinning, and the Promotion Pipeline Neeraj Singhi Neeraj Singhi