https://deploy-preview-3422--ornate-narwhal-088216.netlify.app/contributors/eddie-zaneski/Recent content in Eddie Zaneski onHugo -- gohugo.ioenCopyright (c) 2023 ChainguardTue, 06 Oct 2020 08:50:45 +0000https://deploy-preview-3422--ornate-narwhal-088216.netlify.app/open-source/sigstore/cosign/cosign-manual-way/Wed, 29 Mar 2023 08:49:31 +0000https://deploy-preview-3422--ornate-narwhal-088216.netlify.app/open-source/sigstore/cosign/cosign-manual-way/<blockquote> <p><strong>Note:</strong> This tutorial is no longer actively maintained and may reference outdated versions of Cosign and related tools. While the underlying cryptographic concepts remain relevant, we recommend consulting the <a href="https://docs.sigstore.dev/cosign/signing/overview/">current Cosign documentation</a> for up-to-date usage guidance. This content is preserved for educational purposes and may still provide value for those interested in understanding the mechanics of software signing.</p> </blockquote> <p>When I first used <a href="https://github.com/sigstore/cosign">Cosign</a>, the software artifact signing CLI from the <a href="https://www.sigstore.dev/">Sigstore</a> project, I was amazed at how painless signing and verifying could be.</p>