Google Cloud Binary Authorization

Binary Authorization is a deploy-time security control that ensures only trusted container images are deployed on Google Kubernetes Engine (GKE) or Cloud Run. With Binary Authorization, users can require images to be signed by trusted authorities during the development process and then enforce signature validation when deploying. By enforcing validation, users can gain tighter control over your container environment by ensuring only verified images are integrated into the build-and-release process.