Changelog
- [3be8f9] Managed by Terraform
- [93e16c] fix goreleaser signing on release
You can verify the signatures of both the checksums.txt file and the published docker images using cosign.
:::bash
cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pub
:::bash
cosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.15.1 --key https://artifacts.fairwinds.com/cosign-p256.pub