Sigstore demo to sign a docker image and add attestations (SBOM and SLSA Attestation).
This is the repository used to showcase the functionalities at some conferences
It comes without any warranty; you can use it at your own risk, run make help
to see
available tasks.