Sigstore

Sigstore provides open-source tools for signing and verifying software artifacts and recording signatures in transparency logs.

Development teams can consult the official documentation for signing container images or releases and verifying them in a build or deployment workflow.