e4a9ef0dd3
Signing OCI containers and other artifacts using Sigstore Cosign aims to make signatures invisible infrastructure. Cosign supports: - "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log (default) - Hardware and KMS signing - Signing with a cosign generated encrypted private/public keypair - Container Signing, Verification and Storage in an OCI registry. - Bring-your-own PKI WWW: https://github.com/sigstore/cosign
10 lines
375 B
Plaintext
10 lines
375 B
Plaintext
Cosign aims to make signatures invisible infrastructure.
|
|
|
|
Cosign supports:
|
|
- "Keyless signing" with the Sigstore public good Fulcio certificate
|
|
authority and Rekor transparency log (default)
|
|
- Hardware and KMS signing
|
|
- Signing with a cosign generated encrypted private/public keypair
|
|
- Container Signing, Verification and Storage in an OCI registry.
|
|
- Bring-your-own PKI
|