cosign
https://github.com/sigstore/cosign
Go
Container Signing
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported1 Subscribers
Add a CodeTriage badge to cosign![CodeTriage badge for sigstore/cosign](/sigstore/cosign/badges/users.svg?count=1)
Help out
- Issues
- Support trusted root in cosign verification
- Add OCI image annotations to gcr.io/projectsigstore/cosign images
- Upgrade to TUF v2 client
- chore(deps): bump cuelang.org/go from 0.9.2 to 0.10.0
- Allow signing local image without registry access
- Sign with a passkey signature
- invalid PEM value error trying to validate an SBOM attestation signed with a local key pair
- Allow signing local image without registry access
- AWS KMS Keys appear to only be able to use RSASSA_PKCS1_V1_5_SHA_256 signing algorithm
- sign: Include rekor entry ID in output
- Docs
- Go not yet supported