S

sigstore

Signing OCI containers (and other artifacts) using Sigstore

Toolchain image for the Coroboros security gates.

Structural integrity gate. Intercepts changes before execution and rejects when historical invariants break — even when cosign says Verified OK.

GitLab CI/CD component for signing artifacts with Sigstore

This Example shows how to use GitLab JWT Token to sign container or blobs using sigstore cosign for both staging and production sigstore infrastructure.