Sign your manifest with Sigstore keyless (GitHub OIDC), run through the 6-stage review pipeline, and go live. Four steps, mostly filling in a form.
›Publishing multiple entities together?Use the bundle wizardPublishing requires a GitHub account. Your OIDC token is used for keyless Sigstore signing — we never see a long-lived credential.
By publishing you agree to the content policy.