Explore adding a cosign extension for docker desktop

[sambhav]

Description

Docker has just announced a docker desktop extensions sdk. Explore if this is something cosign can integrate with to provide image verification during pulls and signing during push.

See https://www.docker.com/blog/docker-extensions-preview/

[dlorenc]

+1! Let's do it!

[imjasonh]

Docs for this is live now:

• https://docs.docker.com/desktop/extensions-sdk/
• https://docs.docker.com/desktop/extensions-sdk/extensions/METADATA/
• https://docs.docker.com/desktop/extensions-sdk/extensions/DISTRIBUTION/

[Dentrax]

I think it would be great to start somewhere to get into it. @developer-guy we can't wait, right?

---

So we basically need a boilerplate project which we can easily create by issuing $ docker extension init cosign-docker-extention command. And we can push this repository directly under signature org. By doing so, we can create some random issues for further discussion about UI/UX design and other ideas. (designing cosign-as-a-service, endpoints, etc.)

Furthermore, it would be nice to find someone who understands UI design and Figma stuff. After that, implementing UI would straightforward task since we are going to use Material-UI and React.

I think we can start now if someone create a cosign-docker-extention repository. We can also iterate the project by submitting small PRs. Thoughts?

[developer-guy]

let's give it a spin: https://github.com/developer-guy/cosign-docker-extension

cc: @dlorenc @imjasonh @samj1912 @Dentrax