Cosign Public Key
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEcsX3tlqnGR3EVvyLqKaF4PZJGcrq
VNDGjhU63a/T8BIsS8tvLd8l3kk1hW7m0Mla03HLKBhv4uqxvWLXFwdvUQ==
-----END PUBLIC KEY-----
Cosign Verifiy Command
cosign verify --key hybirdaccess-cosign.pub <URL>/<PATH>/<NAME>@sha256:<DIGEST>
GPG Public Key
-----BEGIN PGP PUBLIC KEY BLOCK-----
mDMEZzxoahYJKwYBBAHaRw8BAQdAVZ9kBVEEGgwryk75sV71loEVhQpnx/9w+wxg
spLIJNq0PEF1dG9tYXRpb24gKENJQ0QgQnVpbGQgU2VydmljZXMpIDxpbmYtdGVh
bUBoeWJyaWRhY2Nlc3MuY29tPoiZBBMWCgBBFiEE9zun3XOKXTj4vwGN4O/vumiA
eBoFAmc8aGoCGwMFCRLMAwAFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQ
4O/vumiAeBrIXwD/VJP5vQL202N2VmIRMxHkgH7xpuMsXVXhpK++FsNAt2ABAIHi
hBfOZZSIIvQK3D+dpLGEgBKVDxCEQE67ih7fg9UAuDgEZzxoahIKKwYBBAGXVQEF
AQEHQEca49uHN4f73M8CGw/SyuPqD79D4TaANRWzlwA2Cx07AwEIB4h+BBgWCgAm
FiEE9zun3XOKXTj4vwGN4O/vumiAeBoFAmc8aGoCGwwFCRLMAwAACgkQ4O/vumiA
eBpo8QEAmB+1Mr0BHWrZGXIwslxq5myF7MLphnUxDg11hAtYMVoA/2/zC+JjFgf6
z5u6+3E6u3/xFM8hIpqhGnMgiENV9nwO
=Zo4l
-----END PGP PUBLIC KEY BLOCK-----
Verifiy GPG Signatures Command
gpg --verify <SIGNATURE-FILENAME>.sig  <FILENAME>