Skip to content

[security] Sign container images with cosign on release #11

Open
Open
[security] Sign container images with cosign on release#11
Labels
dockerDocker, Compose, GHCRphase-1Registry and exact cachesecuritySecurity or supply chain

Description

@kaynor
kaynor
opened on Jun 19, 2026

Goal

Add Sigstore/cosign signing to release-images workflow.

Acceptance criteria

  • Images signed on GitHub Release
  • INSTALL.md documents verification steps

Metadata

Metadata

Assignees

No one assigned

    Labels

    dockerDocker, Compose, GHCRphase-1Registry and exact cachesecuritySecurity or supply chain

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions