Chris Lu fee3929a95 ci: composite action that signs and verifies an image with cosign ...

Keyless, by digest, with a verification pass against the calling workflow's
own identity right after signing. Signatures use the .sig tag layout rather
than the OCI-referrer bundle cosign 3 writes by default, since that is what
the verifiers people run today read. Dependabot is pointed at the action so
the cosign-installer pin keeps moving.

Claude-Session: https://claude.ai/code/session_01A5zMqzaUg1Snur4Yg8xJGa

2026-09-03 09:14:00 -07:00

..

fix-fusermount-setuid

ci: harden the fusermount3 repair (#10485)

2026-07-29 14:02:33 -07:00

sign-image

ci: composite action that signs and verifies an image with cosign

2026-09-03 09:14:00 -07:00