CmdID

CmdID / Commands

cosign

Container Signing, Verification, and Storage in an OCI registry. tldr-pages

On several platforms

Opens CmdID with your command. It is read in your browser and sent nowhere.

Several platforms

from tldr-pages, CC BY 4.0

Generate a key-pair

cosign generate-key-pairIdentify

Sign a container and store the signature in the registry

cosign sign --key cosign.key imageIdentify

Sign a container image with a key pair stored in a Kubernetes secret

cosign sign --key k8s://namespace/key imageIdentify

Sign a blob with a local key pair file

cosign sign-blob --key cosign.key path/to/fileIdentify

Verify a container against a public key

cosign verify --key cosign.pub imageIdentify

Verify images with a public key in a Dockerfile

cosign dockerfile verify -key cosign.pub path/to/DockerfileIdentify

Verify an image with a public key stored in a Kubernetes secret

cosign verify --key k8s://namespace/key imageIdentify

Copy a container image and its signatures

cosign copy example.com/src:latest example.com/dest:latestIdentify