latiotech

Setup Image Signing — Development skill for Claude Code

Development community

Walkthrough: Set up container image signing with Cosign/Sigstore.

How to install Setup Image Signing

Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-image-signing/SKILL.md

Terminal

mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-image-signing && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/setup-image-signing.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-setup-image-signing/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Setup Image Signing does

description: "Walkthrough: Set up container image signing with Cosign/Sigstore" allowed-tools: Read, Write, Edit, Glob, Grep, Bash(git:, docker:, cosign:, gh:)

Interactive walkthrough to set up container image signing and verification using Cosign (part of the Sigstore project). This ensures images haven't been tampered with between build and deploy.

Read `${CLAUDE_PLUGIN_ROOT}/skills/supply-chain-hardening/references/container-configs.md` for Cosign reference configs.

Why sign

Alternatives in Development

Imagegen — Generate and edit images using OpenAI's Image API for projects 14.6k ★
Mono Color Skill — One-ink editorial print image skill — warm paper, halftone photography, active negative space, and restrained 3k ★
E2e Devcontainer — Run E2E tests in a dev container (isolated environment) 1.6k ★