thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Cosign

Sigstore's command-line tool for signing, verifying and attaching attestations to container images and other OCI artifacts.

Definition

Cosign stores signatures and attestations in OCI registries alongside images, supports keyless and key-based signing, and is used with admission policies to allow only signed images into Kubernetes.

Example

An admission policy in the cluster blocks images that do not carry a valid Cosign signature from the release pipeline.

Exam tip

Image signing + admission verification is the standard container supply chain control.

Related terms