You can now configure Oracle Functions applications to only allow the creation, updating, deployment, and invocation of functions based on images in Oracle Cloud Infrastructure Registry (OCI Registry) that have been signed by particular master encryption keys stored in OCI Vault.

For more information, see Signing Function Images and Enforcing the Use of Signed Images from Registry.