.cert</a></li>
</ul></li>
</ul>

<p>To verify the artifact signatures via <a href="https://github.com/sigstore/cosign" target="_blank">cosign</a>, run:</p>

<pre><code class="language-console">&gt; export COSIGN_EXPERIMENTAL=1
&gt; cosign verify-blob cri-o.amd64.v1.28.5.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.28.5 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/