Implements Sigstore-based software signing and verification using Cosign keyless signing, Rekor transparency log verification, and Fulcio certificate authority integration to establish cryptographic provenance for container images, binaries, and software artifacts, including OIDC-based identity binding and CI/CD pipeline integration.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-sigstore-for-software-signingnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-sigstore-for-software-signing -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-sigstore-for-software-signing -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-sigstore-for-software-signinggh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-sigstore-for-software-signinggit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-sigstore-for-software-signing ~/.claude/skills/implementing-sigstore-for-software-signing # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-sigstore-for-software-signing ~/.agents/skills/implementing-sigstore-for-software-signing # Codex, Cursor, Gemini CLI, Copilot, OpenCode