When the issue of cosign keys being rerolled in Bazzite I did not notice it at all due to using this template for my own spin https://github.com/Venefilyn/VeneOS/
We should add a step about verifying the upstream cosign keys. IIRC it is possible with cosign-installer
When the issue of cosign keys being rerolled in Bazzite I did not notice it at all due to using this template for my own spin https://github.com/Venefilyn/VeneOS/
We should add a step about verifying the upstream cosign keys. IIRC it is possible with cosign-installer