Cosign
How to verify file signatures with Cosign
Use Cosign to verify non-container software artifacts
Cosign: The manual wayVerifying signatures in air-gapped environmentsUse Cosign to verify container signatures and attestations without outbound network access