Gist: CircleCI adds support for Sigstore Cosign keyless signing using OIDC tokens, letting pipelines sign artifacts without managing long-lived keys. The integration provides cryptographic provenance for container images and other build outputs.
Signal reason: It reinforces a security-focused positioning around trusted, provenance-backed CI pipelines.
