Skip to content

Signing Software Artifacts with Sigstore Cosign

This tutorial on deploying Sigstore (Cosign, Rekor, Fulcio) for container and binary integrity on Ubuntu covers keyless compared with key-based models, Fulcio's OIDC trust, Rekor transparency usage, and verification policy design.

Calligraphy pen
Lead Image © olegdudko, 123rf.com

This content is for paying members only

Subscribe
Add ADMIN IT Infrastructure & Operations on Google