add --ca-roots and --ca-intermediates flags to 'cosign verify' #7239
validate-release.yml
on: pull_request
check-signature
7s
validate-release-job
18m 15s