Verifies container image signatures and provenance using Sigstore Cosign and Rekor transparency log. Enforces supply chain policies with OPA Gatekeeper admission rules.

Sigstore Cosign Container Verifier

Verifies container image signatures and provenance using Sigstore Cosign and Rekor transparency log. Enforces supply chain policies with OPA Gatekeeper admission rules.

Installation

Method 1, Agent Skill Exchange

Install from the marketplace listing: https://agentskillexchange.com/skills/sigstore-cosign-container-verifier/

Method 2, Git clone

git clone https://github.com/agentskillexchange/skills.git && cd skills/skills/sigstore-cosign-container-verifier

Method 3, Download ZIP

Download the repository ZIP and extract skills/sigstore-cosign-container-verifier.

Method 4, Manual copy

Copy this skill folder into your local skills directory, then reload your agent tooling.

Method 5, Fork and sync

Fork the repository if you want to maintain local edits while syncing upstream changes.

Source

Agent Skill Exchange