Quality Assurance & Testing
Cosign
Sign, verify and attest container images and other OCI artifacts with Cosign, the Sigstore tool. Use when a user asks to sign an image in CI, verify a signature before deploying, do keyless signing with GitHub OIDC, attach an SBOM or provenance attestation, or enforce signed images in Kubernetes with Kyverno.
- Publisher / source
- TerminalSkills Library
- Upstream record
- TerminalSkills/skills
- Version
- Version 4
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-10-29
- Content fingerprint
eb53236bbd45bc606dbb0c922c456abf04f2dfa8bdcbe24f48ee953fd7fa48c5