Cosign & Sigstore Signing
Sign and verify container images and artifacts with Cosign and Sigstore for supply chain integrity. Set up keyless signing with OIDC, attach SBOM and provenance attestations, verify signatures in admission controllers, and enforce signed-only deploys in CI/CD.
mkdir -p ~/.claude/skills/cosign-sigstore && curl -fsSL https://raw.githubusercontent.com/TerminalSkills/skills/main/skills/cosign/SKILL.md -o ~/.claude/skills/cosign-sigstore/SKILL.md