This is a lab repo for Chapter 5 of the edX LinuxFoundationX LFS182x Securing Your Software Supply Chain with Sigstore course where GitHub Actions are used to perform keyless signing on a sample container.
See sigstore and sigstore/cosign for details about the project and the cosign command line tool.