Cosign
Verifying signatures in air-gapped environments
Use Cosign to verify container signatures and attestations without outbound network access
The differences between SBOMs and attestationsAn overview of the differences between attestations and SBOMs
How to keyless sign a container image with SigstoreUse Cosign and GitHub Actions to keyless sign a Django container image