cosign

wikipedia:cosign Container Signing, Verification and Storage in an OCI registry.

• https://github.com/sigstore/cosign

cosign sign
cosign verify

Related

• 05/2022 Kubernetes 1.24 release artifacts are signed using cosign signatures
• Open Container Initiative (OCI)
• Distroless
• docker-publish.yml

See also

• cosign
• Containers, OCI: Docker (dockerd), containerd, runc, Podman, buildah, skopeo, lxd, Container Registry, Service mesh, Windows Server containers, Containerpilot, CoreOS, CAdvisor, Containers networking, Container scanning, cosign, CRI, CRI-O, initContainers, Sidecar container, Container images, latest, Development Containers, LXC