Binary Authorization은 Google Cloud Google Cloud지원 컨테이너 기반 플랫폼에 배포된 컨테이너에 일련의 규칙(정책)을 적용하여 소프트웨어 공급망 보안을 제공하는 서비스입니다.
이 서비스는 일련의 규칙을 기준으로 이러한 컨테이너의 배포를 허용하거나 차단합니다.
또한 Binary Authorization은 각 배포된 컨테이너가 정책을 계속 준수하는지 확인하기 위해 지속적 검증을 제공합니다.
Cloud Deploy와 Binary Authorization 사이에는 직접 통합이 없지만 이를 종합해서 소프트웨어 배포 프로세스를 보호할 수 있습니다.
배포 가능한 이미지에 대한 Binary Authorization 기능
배포 시 Binary Authorization은 증명을 사용해서 이전에 프로세스가 완료되었는지 확인할 수 있습니다. Binary Authorization을 사용할 수 있는 몇 가지 예시는 다음과 같습니다.
컨테이너 이미지가 특정 빌드 시스템이나 지속적 통합 파이프라인에서 빌드되었는지 확인합니다.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-03(UTC)"],[[["\u003cp\u003eBinary Authorization is a Google Cloud service that enhances software supply-chain security by enforcing rules on container deployments.\u003c/p\u003e\n"],["\u003cp\u003eThe service permits or denies container deployment based on a set of predefined rules, known as a policy.\u003c/p\u003e\n"],["\u003cp\u003eBinary Authorization offers continuous validation to ensure deployed containers remain compliant with the established policy.\u003c/p\u003e\n"],["\u003cp\u003eAt deploy time, Binary Authorization can leverage attestations to confirm the completion of previous processes, such as verifying the build source or compliance with vulnerability signing policy.\u003c/p\u003e\n"],["\u003cp\u003eAlthough there is no direct integration with Cloud Deploy, Binary Authorization can be used in conjunction to bolster the security of the software delivery process.\u003c/p\u003e\n"]]],[],null,["# Secure deployments using Binary Authorization\n\n[Binary Authorization](/binary-authorization) is a Google Cloud service that\nprovides software supply-chain security by enforcing a set of rules\n([policy](/binary-authorization/docs/overview#policy_model)) on containers\ndeployed on a Google Cloud\n[supported container-based platform](/binary-authorization/docs/overview#supported_platforms).\nThe service allows or blocks deployment of these containers based on that set of\nrules.\n\nAlso, Binary Authorization provides [continuous validation](/binary-authorization/docs/overview-cv#overview)\nto ensure that each deployed container continues to conform with policy.\n\nThere is no direct integration between Cloud Deploy and\nBinary Authorization, but you can use them together to help secure your\nsoftware delivery process.\n\nWhat Binary Authorization can do for your deployable images\n-----------------------------------------------------------\n\nAt deploy time, Binary Authorization can use [attestations](/binary-authorization/docs/key-concepts#attestations)\nto determine that a process was completed earlier. Here are some examples of\nwhat you can use Binary Authorization for:\n\n- Verify that a container image was built by a specific build system or\n continuous integration pipeline.\n\n- Validate that a container image complies with vulnerability signing policy.\n\n- Verify that a container image passes criteria for promotion to the next target.\n\nWhat's next\n-----------\n\n- Learn more about how to use [Binary Authorization](/binary-authorization/docs)\n to help ensure the integrity of your container images.\n\n- [Try a tutorial](/binary-authorization/docs/getting-started-cli), for\n GKE, to configure and test a Binary Authorization\n policy that requires attestations.\n\n- Learn about the [deployment lifecycle](/binary-authorization/docs/overview#lifecycle),\n in the context of Binary Authorization."]]
