Changelog
- 71958f1 better HTML for docs
You can verify the signatures of both the checksums.txt file and the published docker images using cosign.
cosign 1.x
cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub
cosign 2.x
cosign verify-blob checksums.txt --signature=checksums.txt.sig --key https://artifacts.fairwinds.com/cosign.pub --insecure-ignore-tlog
cosign verify us-docker.pkg.dev/fairwinds-ops/oss/bif:v0 --key https://artifacts.fairwinds.com/cosign.pub