{"slug":"implementing-image-provenance-verification-with-cosign","source_name":"implementing-image-provenance-verification-with-cosign","name":"Implementing Image Provenance Verification With Cosign","description":"Sign and verify container image provenance using Sigstore Cosign with keyless OIDC-based signing, attestations, and Kubernetes admission enforcement.","version":1,"lift":{"pass_rate_delta_pts":18.18,"pass_rate_pct":36.4,"total_cases":22,"passed_cases":8,"tokens_delta_pct":126.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T17:20:14.778122+00:00"},"skill_score":0.3636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":18.18,"with_pass_pct":36.4,"without_pass_pct":18.2,"tokens_delta_pct":126.1,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":21,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T17:20:14.778122+00:00","run_id":"8f380f72-5976-4dac-b0aa-b90b377af191","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"d84e585a73d598de9258ec201029953c584e00c5042828f66a3789fcdc27b5ea","raw_url":"https://app.decimal.ai/s/implementing-image-provenance-verification-with-cosign/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/implementing-image-provenance-verification-with-cosign"}