Proof of concept that uses cosign and GitHub's in built OIDC for actions to sign container images, providing a proof that what is in the registry came from your GitHub action.
-
Updated
Jan 31, 2023 - Dockerfile
#
sigstore
Here is 1 public repository matching this topic...
Improve this page
Add a description, image, and links to the sigstore topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the sigstore topic, visit your repo's landing page and select "manage topics."