cosign

Cosign is a popular open-source tool from sigstore used for signing and verifying OCI container images. It's a trusted part of many cloud-native