Verifying cosign signatures when using podman

Today, I learned that podman supports verifying cosign signatures, if you configure it properly. Here is how to make it work with a public key, instead of the self-signed certificates that Sigstore uses. First, I edited the /containers/registries.d/default.yaml file to use sigstore attachments (that comprises signatures …