Signing containers and OCI artifacts: Notation, Cosign, and why the trust model is the real decision Read More