nullplatform public keys

Public cryptographic keys used by nullplatform for artifact signing and verification.

Container image signing

Container images published to ECR Public (public.ecr.aws/nullplatform/*) are signed with cosign using an AWS KMS key.

Verify a signed image

cosign verify \
  --key https://nullplatform.github.io/security-public-keys/cosign.pub \
  public.ecr.aws/nullplatform/<image>:latest

Keys

File	Algorithm	Usage
cosign.pub	ECC NIST P-256	Container image signature verification