1.可以使用dockerhub，然后使用docker login登录
2.
3.
保存凭据 创建仓库，制作标签 签名镜像生成key
验证
keyless模式
ubuntu@ubuntu:~/Desktop$ COSIGN_EXPERIMENTAL=1 ./cosign sign -oidc-issuer "https://oauth2.sigstore.dev/auth" -fulcio-url "https://fulcio.sigstore.dev" -rekor-url "https://rekor.sigstore.dev" docker.io/martinheinz/sigstore-hello:latest WARNING: the flag -oidc-issuer is deprecated and will be removed in a future release. Please use the flag --oidc-issuer. WARNING: the flag -fulcio-url is deprecated and will be removed in a future release. Please use the flag --fulcio-url. WARNING: the flag -rekor-url is deprecated and will be removed in a future release. Please use the flag --rekor-url. Generating ephemeral keys... Retrieving signed certificate... Your browser will now be opened to: https://oauth2.sigstore.dev/auth/auth?access_type=online&client_id=sigstore&code_challenge=a9N4-pcTtc1Wt1A7qkwb2hOjOMAlUr3potFrrrabfec&code_challenge_method=S256&nonce=28uTcSLco8qO8MwulA1MdCiDPmL&redirect_uri=http%3A%2F%2Flocalhost%3A33663%2Fauth%2Fcallback&response_type=code&scope=openid+email&state=28uTcUCGhUflUIxFjU5oYiWWNUa Successfully verified SCT... tlog entry created with index: 2280007 Pushing signature to: index.docker.io/martinheinz/sigstore-hello
