Secure open source container infrastructure with GitLab and Chainguard

This post details the integration of Chainguard's minimal, hardened container images with low-to-no CVEs, container signing via Sigstore/Cosign, and GitLab's built-in vulnerability scanning tools (SAST, DAST, IaC, Container Scanning, Dependency Scanning, Secret Detection, API Fuzzing, Coverage-guided Fuzzing) to create a secure open-source container infrastructure. It provides examples of using Chainguard images in GitLab jobs and Dockerfiles, and explains how to leverage GitLab's CI/CD for container image signing and vulnerability scanning.