slsa-github-generator
slsa-github-generator copied to clipboard
[docs] Container image provenance verification using cosign
trafficstars
Add some docs and samples of using cosign to verify provenance using cosign w/ cue policy (rego seems to not really be supported as much).