
validate the provenance of Istio image artifacts.</p><p>Cosign is a tool developed as part of the
<a href=https://www.sigstore.dev>sigstore</a> project, which
simplifies signing and validation of signed Open Container Initiative (OCI) artifacts,
such as container images.</p><p>Starting with Istio 1.12, we sign all officially published container images as part of our release
process. End users can then verify these images using
the process described below.</p><p>This process is suitable for either manual ex