sigstore-cosign-supply-chain-review

【部署与运维】Use this skill when reviewing Sigstore Cosign supply chain security for Kubernetes workloads. Trigger when the user asks whether images are properly signed, whether Kyverno imageVerify policy is correctly scoped, whether SLSA provenance attestations exist, whether SBOM attestations are present, whether keyless signing is in use, or whether Rekor tran…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准