C

cosign

DevSecOps health check for GitLab Self-Managed instances.

CI/CD Catalog components for FROM-scratch bootc images

Unified compliance matrix for shipping software into regulated sectors. DoD, HIPAA, Finance, Education. Rust audit CLI.

CI/CD catalog components for regulated container builds. Standardizes buildah, cosign signing, verification, and release across public-sector-tools projects. Consumed via GitLab CI component includes.

Deployment shim for storyping. Downloads signed binary from storyping project, verifies cosign signature, extracts assets, and deploys to GitLab Pages. Not a standalone tool.

This project contains shell scripts I use to create keys and certificates in order to explore and evaluate using cosign to attach certificates and certificate chains to OCI images.

A quick demo project highlighting how once can sign a container image to later verify it when rolling it out in production

Reusable single pipeline configuration unit for cosign sign and verify operations