resolving package metadata…
packages / ply
container signing tool with support for ephemeral keys and Sigstore signing
license: Apache-2.0https://github.com/sigstore/cosign
[dependencies] cosign = "2.2"