Initial commit

cosign.pub

@@ -0,0 +1,16 @@
+-----BEGIN PUBLIC KEY-----
+REPLACE THIS TEXT WITH YOUR ACTUAL PUBLIC KEY
+Generated by running: cosign generate-key-pair
+After generating, paste the contents of your cosign.pub file here
+-----END PUBLIC KEY-----
+
+Instructions:
+1. Run: cosign generate-key-pair
+2. This creates cosign.key (private) and cosign.pub (public)
+3. Copy the entire contents of cosign.pub
+4. Replace this entire file with that content
+5. Commit and push this file
+6. Add cosign.key contents to GitHub Secrets as SIGNING_SECRET
+   (See README.md for detailed instructions)
+
+Never commit cosign.key - it must remain private!