cosign
Named by 8 kept items in this workspace.
6 items name it under tools and 2 under classification.key entities.
The items that name it 8
Signing and verifying images and artifacts, including keyless signing.
verifies container image signatures, SLSA provenance, and SBOM attestations for glsec's container image (v3+ required)
Keyless signing tool used to verify SHA256SUMS.txt release integrity via 'cosign verify-blob' against the GitHub Actions OIDC identity
image signing and signature verification
Container image signing, paired with Kyverno verifyImages policy to block unsigned images at admission
Artifact signing/provenance
In every workspace you can read 9
Security
AI
All technologies in this workspace.