add --ca-roots and --ca-intermediates flags to 'cosign verify' #7261
validate-release.yml
on: pull_request
check-signature
5s
validate-release-job
18m 31s