Integrate Cosign images signature in CI pipeline

[lbroudoux]

Integrate with cosign for signing container images as it has been done here microcks/microcks-operator#63 for the operator images.

[lbroudoux]

Now done! SBOM generation and SLSA provenance attestation are also generated and added as metadata layer to the images now.

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity 😴

It will be closed in 30 days if no further activity occurs. To unstale this issue, add a comment with a detailed explanation.

There can be many reasons why some specific issue has no activity. The most probable cause is lack of time, not lack of interest. Microcks is a Cloud Native Computing Foundation project not owned by a single for-profit company. It is a community-driven initiative ruled under open governance model.

Let us figure out together how to push this issue forward. Connect with us through one of many communication channels we established here.

Thank you for your patience ❤️