Keyless signatures for blobs with cosign

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

While reading the cosign-installer I have stumbled upon these lines in the documentation: - name:SigntheimageswithGitHubOIDC**notproductionready**run:cosignsign-oidc-issuerhttps://token.actions.githubusercontent.com${TAGS}env:TAGS:${{steps.docker_meta.outputs.tags}}COSIGN_EXPERIMENTAL:1The shown lines are a step of a Github Action and are still experimental, but very interesting. It allows to sign…

Read on shibumi.dev ↗