 -verify &lt;(curl -ssL https://raw.githubusercontent.com/sigstore/cosign/main/release/release-cosign.pub) \
    -signature &lt;(cat /path/to/cosign.sig | base64 -d) \
    /path/to/cosign-binary
</code></pre></li><li><p>Make the binary executable (<code>chmod +x</code>) and move to a location on the <code>PATH</code></p></li></ol><h2 id=validating-image>Validating Image</h2><p>To validate a container image, do the following:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ ./cosign-