cosign
FIPS 140-3Developer toolsCosign supports container signing, verification, and storage in an OCI registry. Written in Go, it aims to make signatures invisible infrastructure.
Cosign supports container signing, verification, and storage in an OCI registry. Written in Go, it aims to make signatures invisible infrastructure.
Cosign is a CLI tool designed to sign and verify software artifacts, such as container images, using the Sigstore framework. It plays a key role in securing the software supply chain by enabling digital signatures that confirm the origin and integrity of released software.
For more details, see https://docs.sigstore.dev/.