Why I Built OCI Image Explorer

&ldquo;Can you confirm that our production container images have valid SBOMs, signatures, and attestations?&rdquo; Should have been routine. Quick check, thumbs up, move on. Instead I spent the next hour copying digests between terminal windows, mentally mapping relationships between image indexes and their referrers, and wondering why verifying a container&rsquo;s supply chain felt like…