Goal

• sigstore is the name of the signing project and format; cosign is the name of one implementation — one not included in RHEL proper.

Acceptance criteria

A list of verification conditions, successful functional tests, or expected outcomes in order to declare this story/task successfully completed.

• rpm -ql redhat-release | grep -i cosign returns zero results