This document provides a step-by-step guide to signing Docker images stored in Amazon ECR using Cosign and AWS KMS, enabling secure software supply chain practices in Kubernetes (EKS) environments.
https://awstip.com/docker-image-signing-and-verification-2d2916f8129e