Skip to content

feat(cosign): implement cosign for signing docker images in CI #278

@abhisheksr01

Description

@abhisheksr01

Description

Implement sigstore/cosign for adding provenance and signing the container image in GitHub Action CI.

Use Case

Once the image is built in the CI and should be signed in the GHA CI.

Proposed Solution

Implement and document the use of cosign in the CI. Document why it's needed.

Benefits

Secure use of container images.

Example

Additional Information

https://github.com/sigstore/cosign

Metadata

Metadata

Assignees

Labels

enhancementNew feature or requestsecurity-devsecopsSecurity features to improve the security posture and implement DevSecpOps

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions