Proposal for harbor cosign signature verification

[karaguo]

To add a proposal for cosign signature verification in Harbor

[Vad1mo]

@karaguo I would also like to invite you to present your proposal at the next community meeting.

If that doesn't work, I'll suggest you can also do a 15 min recording, that we can watch during the community meeting

[Vad1mo]

@karaguo, could you contribute to the development of this feature?

[karaguo]

@Vad1mo Thanks for the comments! Sgtm! I can work on a brief demo recording and follow up with the review process to kick off

[wy65701436]

Generally, we don't plan to include the signature validation as Harbor's current goal is to focus on OCI artifact management, rather than becoming a comprehensive solution. And we can rely on other service or client to handle the validation.