User-friendly, affordable, and packed with different features, DocHub is a healthy and cost-efficient alternative to SignServer Enterprise. Try it now and learn how to squeeze the maximum of our solution with easy-to-use feature shortcuts.
Anton Hodal, a Solutions consultant at Key Factor, demonstrates how to use Sign Server and Cosign to create signed container images. Cosign is a tool for signing and verifying container images developed by the Sigstore project of the Linux Foundation, while Sign Server manages signing keys with audit logging and archiving features. The tutorial covers creating a signing key stored in Sign Server, generating a certificate signing request, issuing a digital signing certificate, creating a Docker container image, putting it into a registry using Cosign, and signing the payload with Sign Server.
