Multi-arch (amd64 + arm64) image, signed with cosign (ECDSA P-256).
Save this public key as cosign.pub:
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELJ4bfsXvK2hRikDKxDUxTdFDSfaK
yLsyLqnwkd592FeloHhfwMFijar3ycFkd3a5IeGwuKQSGjkbcg0fBcf5kg==
-----END PUBLIC KEY-----
then verify (replace the tag as needed):
cosign verify --key cosign.pub docker.io/iofinnet/io-sign-api:<version>
No tags have been pushed to this repository yet.