add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464) #7275
validate-release.yml
on: push
check-signature
5s
validate-release-job
17m 55s