sigstore-rs
sigstore-rs copied to clipboard
Add examples for each of the cosign verification mechanisms
The README specifies that we can:
- [x] Verify using a given key
- [ ] Verify bundle produced by transparency log (Rekor)
- [ ] Verify signature produced in keyless mode, using Fulcio Web-PKI
However, the current documented example is for verifying using a given key only. We should add two more examples.