Sidero Labs signs the container images generated for the Talos release with cosign: ghcr.io/siderolabs/installer (Talos installer) ghcr.io/siderolabs/talos (Talos image for container runtime) ghcr.io/siderolabs/talosctl (talosctl client packaged as a container image) ghcr.io/siderolabs/imager (Talos install image generator) all system extension images Verifying Container Image Signatures The cosign tool can be used to verify the signatures of the Talos container images: bash $ cosign verify -...