Docker image signing (Cosign), SBOM generation, SLSA provenance attestation, GHCR registry management.