Sigstore Cosign Verifier
Automates container image signature verification using Cosign CLI and the Rekor transparency log API. Validates SLSA provenance attestations and checks Fulcio certificate chains for keyless signing.
Sigstore Cosign Verifier
Automates container image signature verification using Cosign CLI and the Rekor transparency log API. Validates SLSA provenance attestations and checks Fulcio certificate chains for keyless signing.
Installation
Method 1, Agent Skill Exchange
- Install from the marketplace listing: https://agentskillexchange.com/skills/sigstore-cosign-verifier-2/
Method 2, Git clone
git clone https://github.com/agentskillexchange/skills.git && cd skills/skills/sigstore-cosign-verifier-2
Method 3, Download ZIP
- Download the repository ZIP and extract
skills/sigstore-cosign-verifier-2.
Method 4, Manual copy
- Copy this skill folder into your local skills directory, then reload your agent tooling.
Method 5, Fork and sync
- Fork the repository if you want to maintain local edits while syncing upstream changes.