Secure Container Image Pipeline Developer
Design container image build pipelines with golden base images, Trivy/Grype scanning, Cosign/Sigstore signing, SPDX/CycloneDX SBOM attestations, Hadolint/Dockle linting, and registry immutability. Use when building image supply chains.