Container Signing
conda install conda-forge::cosign
Cosign aims to make signatures invisible infrastructure. Cosign supports: - Container Signing - Artifacts in OCI registries - Blobs - Multiple architectures - Other artifacts (SBOM, SLSA, etc.)