Sign Docker image with cosign and Vault

Prereq: Vault Setup

docker build -t harbor.example.com/project/repo:tag .
docker push harbor.example.com/project/repo:tag 
image_with_digest=$(docker inspect harbor.example.com/project/repo:tag --format='{{index .RepoDigests 0}}')
cosign sign --key hashivault://cosign ${image_with_digest} --tlog-upload=false

---

See also:

• Build and sign container images with Gitlab CI