On: Binary Authorization for Borg

[ImJasonH]

Kritis[0] is a K8s implementation of this that intends to block deployments of images that haven't been properly vetted beforehand, or has critical vulnerabilities, etc.

Whitepaper: https://github.com/grafeas/kritis/blob/master/docs/binary-au...

[0] https://github.com/grafeas/kritis