supply-chain-onboarding
OfficialSecure your app's CI pipeline with Kyverno cosign verification.
Authorasanexample
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill ensures that your app's GitHub Actions CI pipeline images pass Kyverno cosign verification, securing your supply chain.
Core Features & Use Cases
- CI Image Signing: Automates the signing of images in your CI pipeline with cosign.
- Provenance Tracking: Generates and tracks provenance for your images.
- Use Case: When setting up or fixing an app repo's deploy.yml / preview.yml, debugging a verify-images / verify-attestations admission failure, or onboarding a product's supply chain.
Quick Start
Run the 'cosign verify' command on your image to ensure it has been signed and attested correctly.
Dependency Matrix
Required Modules
githubkyverno
Components
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: supply-chain-onboarding Download link: https://github.com/asanexample/platform/archive/main.zip#supply-chain-onboarding Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.