container-signing
CommunitySign and verify container images end-to-end.
Authorcameronsjo
Version1.0.0
Installs0
System Documentation
What problem does it solve?
Securing container builds by enabling cryptographic signing and provenance to prevent tampered images from being deployed.
Core Features & Use Cases
- Cosign-based signing of container images with keyless verification and optional attestations.
- SLSA provenance generation to prove build provenance and reproducibility for container artifacts.
- Verification & governance: validate signatures and attestations in CI/CD, GHCR publishing, and runtime environments.
Quick Start
Set up Cosign signing and SLSA provenance for your container builds and GHCR publishing in CI/CD pipelines.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: container-signing Download link: https://github.com/cameronsjo/dev-toolkit/archive/main.zip#container-signing Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.