Cosign
Container Signing, Verification and Storage in an OCI registry.
Go › Zero Trust: “Container Signing, Verification and Storage in an OCI registry.”
Docker › Image Lifecycle > Supply Chain: “Container signing, verification, and transparency log for OCI artifacts.”