Signs and verifies container image provenance with Sigstore Cosign, covering key-based and keyless OIDC signing (Fulcio, Rekor transparency log), SLSA attestations, and enforcing signature verification through Kubernetes admission control.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-image-provenance-verification-with-cosignnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-image-provenance-verification-with-cosign -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-image-provenance-verification-with-cosign -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-image-provenance-verification-with-cosigngh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-image-provenance-verification-with-cosigngit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-image-provenance-verification-with-cosign ~/.claude/skills/implementing-image-provenance-verification-with-cosign # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-image-provenance-verification-with-cosign ~/.agents/skills/implementing-image-provenance-verification-with-cosign # Codex, Cursor, Gemini CLI, Copilot, OpenCode