mod: install cosign and sign wasm component

Author: duffney

.github/workflows/publish.yml

@@ -53,3 +53,14 @@ jobs:
 
       - name: Run publish script
         run: bash scripts/publish.sh ${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.version'] }}
+
+      - name: Install Cosign
+        uses: sigstore/[email protected]
+
+      - name: Sign wasm component
+        run: |
+          image="ghcr.io/${{ github.actor }}/rust-wasi-hello:${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.version'] }}"
+          cosign sign --yes --key env://COSIGN_PRIVATE_KEY $image
+        env:
+          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}