Distroless Builds Are Now SLSA 2

$ cosign verify -attestation -key cosign.pub gcr.io/distroless/[email protected]:4f8aa0aba190e375a5a53bb71a303c89d9734c817714aeaca9bb23b82135ed91 Verification for gcr.io/distroless/[email protected]:4f8aa0aba190e375a5a53bb71a303c89d9734c817714aeaca9bb23b82135ed91 – The following checks were performed on each of these signatures: – The kosign requirements were validated – The signatures…