A utility that can be used to create and verify embedded signatures in docker images, and verify the integrity of image metadata and layers. - View it on GitHub