cosign.key cosign.private /Containerfile *.iso *.iso-CHECKSUM