command to sign component descriptors
-h, --help help for sign
--cli logger runs as cli logger. enables cli logging
--dev enable development logging which result in console encoding, enabled stacktrace and enabled caller
--disable-caller disable the caller of logs (default true)
--disable-stacktrace disable the stacktrace of error logs (default true)
--disable-timestamp disable timestamp output (default true)
-v, --verbosity int number for the log level verbosity (default 1)
- component-cli component-archive signatures - command to work with signatures and digests in component descriptors
- component-cli component-archive signatures sign rsa - fetch the component descriptor from an oci registry, sign it using RSASSA-PKCS1-V1_5, and re-upload
- component-cli component-archive signatures sign signing-server - fetch the component descriptor from an oci registry, sign it with a signature provided from a signing server, and re-upload