Build and deploy Go applications

Code signing and transparency for containers and binaries

Build OCI images from APK packages directly without Dockerfile

Keyless Git signing using Sigstore

Software Supply Chain Transparency Log

Sigstore OIDC PKI

Common go library shared across sigstore services and clients

A collection of reusable Github Actions workflows.

YOLO-level verifier