<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Cosign on SRE Engineering Practice</title><link>https://www.sre.wang/en/tags/cosign/</link><description>Recent content in Cosign on SRE Engineering Practice</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Mon, 20 Jul 2026 16:15:04 +0800</lastBuildDate><atom:link href="https://www.sre.wang/en/tags/cosign/index.xml" rel="self" type="application/rss+xml"/><item><title>Container Image Signing and Verification: Using cosign to Guard the Last Gate of Supply Chain Security</title><link>https://www.sre.wang/en/posts/container-image-signing-cosign/</link><pubDate>Mon, 20 Jul 2026 16:15:04 +0800</pubDate><guid>https://www.sre.wang/en/posts/container-image-signing-cosign/</guid><description>From Sigstore ecosystem principles to cosign in practice, covering keyless signing, CI/CD integration, and Kubernetes admission verification for a complete supply chain security solution</description></item></channel></rss>