Chain Check: find compromised intermediates hiding in your containers and CA bundles

A CLI that scans images, repos and keystores for distrusted CA certificates. DevOps teams pay for the CI gate.