cfeaa4a435
For #5138 To help people transition old container signatures and attestations to the protobuf bundle format that supports offline verification, rotating verification material via trusted roots, etc. Also do not try to convert container signatures, since the signature over the container won't match the signature over the new DSSE that containers use with the protobuf bundle format. --------- Signed-off-by: Zach Steindler <steiza@github.com>
928 B
Generated
928 B
Generated
cosign bundle
Interact with a Sigstore protobuf bundle
Synopsis
Tools for interacting with a Sigstore protobuf bundle
Options
-h, --help help for bundle
Options inherited from parent commands
--output-file string log output to a file
-t, --timeout duration timeout for commands (default 3m0s)
-d, --verbose log debug output
SEE ALSO
- cosign - A tool for Container Signing, Verification and Storage in an OCI registry
- cosign bundle create - Create a Sigstore protobuf bundle
- cosign bundle create-from-container - Create Sigstore protobuf bundles from legacy container attestations
- cosign bundle inspect - Inspect a Sigstore protobuf bundle
- cosign bundle upgrade - Upgrade a Sigstore protobuf bundle