COSIGN
The Differences between SBOMs and Attestations
An overview of the differences between attestations and SBOMs
How to Keyless Sign a Container Image with Sigstore
Use Cosign and GitHub Actions to Keyless Sign a Django Container Image