C

cosign

This project contains shell scripts I use to create keys and certificates in order to explore and evaluate using cosign to attach certificates and certificate chains to OCI images.

A quick demo project highlighting how once can sign a container image to later verify it when rolling it out in production

Reusable single pipeline configuration unit for cosign sign and verify operations