Prevention is Better than Cure: Securing the Container Supply Chain at the Registry Level

Supply Chain security is most effective before deployment, not after. In this session we will demonstrate how Harbor an open source container-registry can act as the security enforcement point of a container supply chain, preventing vulnerable artifacts from progressing further downstream.

No Slides, with interactive live demo driven by the audience, we will cover Harbor's native Trivy integration, including scan-on-push, vulnerability reporting, deployment security policies. We then explore Harbor's Scanner API and show how Kubescape and trivy integrates through a scanner adapter, enabling multiple scanners to assess the same image and surface differing results.

Finally, we examine SBOM generation and storage as OCI artifacts, and how they support faster rescans and stronger software supply chain security.