Sigstore Cosign alternatives
Sigstore Cosign is a tool for signing OCI containers and other artifacts. It aims to make signing a seamless and invisible part of the infrastructure. It supports keyless signing, hardware signing, and uses a public good certificate authority and transparency log by default.