Provides utilities for downloading artifacts and attached artifacts in a registry
-h, --help help for download
--output-file string log output to a file
-t, --timeout duration timeout for commands (default 3m0s)
-d, --verbose log debug output
-y, --yes skip confirmation prompts
- cosign - A tool for Container Signing, Verification and Storage in an OCI registry.
- cosign download attestation - Download in-toto attestations from the supplied container image
- cosign download sbom - Download SBOMs from the supplied container image
- cosign download signature - Download signatures from the supplied container image