feat: add cosign binary to nerdctl-full

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

Dockerfile

@@ -36,6 +36,8 @@ ARG FUSE_OVERLAYFS_VERSION=v1.8
 ARG CONTAINERD_FUSE_OVERLAYFS_VERSION=v1.0.4
 # Extra deps: IPFS
 ARG IPFS_VERSION=v0.11.0
+# Extra deps: Cosign
+ARG COSIGN_VERSION=v1.4.1
 
 # Test deps
 ARG GO_VERSION=1.17
@@ -183,7 +185,15 @@ RUN fname="go-ipfs_${IPFS_VERSION}_${TARGETOS:-linux}-${TARGETARCH:-amd64}.tar.g
   tmpout=$(mktemp -d) && \
   tar -C ${tmpout} -xzf "${fname}" go-ipfs/ipfs && \
   mv ${tmpout}/go-ipfs/ipfs /out/bin/ && \
-  echo "- IPFS: ${IPFS_VERSION}" >> /out/share/doc/nerdctl-full/README.md
+  echo "- IPFS: ${IPFS_VERSION}" >> /out/share/doc/nerdctl-full/README.md \
+ARG COSIGN_VERSION
+RUN fname="cosign-${TARGETOS:-linux}-${TARGETARCH:-amd64}" && \
+  curl -o "${fname}" -fSL "https://github.com/sigstore/cosign/releases/download/${COSIGN_VERSION}/${fname}" && \
+  grep "${fname}" "/SHA256SUMS.d/cosign-${COSIGN_VERSION}" | sha256sum -c && \
+  chmod +x $fname && \
+  mv $fname cosign && \
+  mv cosign /out/bin/ && \
+  echo "- cosign: ${COSIGN_VERSION}" >> /out/share/doc/nerdctl-full/README.md \
 
 RUN echo "" >> /out/share/doc/nerdctl-full/README.md && \
   echo "## License" >> /out/share/doc/nerdctl-full/README.md && \

Dockerfile.d/SHA256SUMS.d/cosign-v1.4.1

@@ -0,0 +1,2 @@
+08ba779a4e6ff827079abed1a6d1f0a0d9e48aea21f520ddeb42ff912f59d268  cosign-linux-amd64
+b0c02b607e722b9d2b1807f6efb73042762e77391c51c8948710e7f571ceaa73  cosign-linux-arm64