sigstore/cosign-gatekeeper-provider

Add support for verifying attestations

anderssonw opened this issue · 0 comments

Description

Currently the provider only checks for Image Signatures. It would be nice if the provider could also check attestations. This could be mutually exclusive, both at the same time, or perhaps optional flags for attestation/signatures.