ImageSentry

ImageSentry is a web app (with optional CLI) that enforces container image hygiene at the point teams actually feel pain: CI and deployment gates. It continuously inventories images used across Kubernetes clusters and CI pipelines, then flags “unknown provenance” images, stale base layers, missing SBOMs, and policy violations (e.g., running as root, unsigned images, forbidden registries). Unlike generic scanners that dump long CVE lists, ImageSentry focuses on actionable, organization-specific rules with clear pass/fail outcomes and simple remediation steps. It integrates with GitHub Actions, GitLab CI, and Argo CD to block merges or deployments when policies fail, while providing exception workflows with audit trails. This is not magic: it won’t eliminate vulnerabilities, but it will reduce preventable risk and stop teams from shipping untraceable images.