Gist: CircleCI adds support for Sigstore Cosign keyless signing using OIDC tokens, letting pipelines sign artifacts without managing long-lived keys. The integration provides cryptographic provenance for container images and other build outputs.
Signal reason: The post announces a new technical capability: keyless artifact signing with Sigstore Cosign and OIDC tokens.
