[Feature] Cosign integration enhancements

[JimBugwadia]

Problem Statement

The current Cosign integration depends on Cosign CLI 1.3 behaviors.

Solution Description

Update Cosign integration to remove dependencies to the Cosign CLI packages and use a OCI client that handles the referrers API and artifacts, similar to Notary support.

Also see: #6401

Alternatives

No response

Additional Context

No response

Slack discussion

No response

Research

• I have read and followed the documentation AND the troubleshooting guide.
• I have searched other issues in this repository and mine is not recorded.

[BenzeneAlcohol]

Hi, I would like to know how to get started with this. I'm a beginner in Kubernetes, but would love to try this out.

[yashvardhanmishra]

I am writing to express my utmost enthusiasm for the mentorship opportunity in enhancing Kyverno's Sigstore Cosign Module using OCI Artifacts. I have prepared a detailed proposal that showcases my passion for the project, as well as my skills in Golang, Kubernetes, and eagerness to contribute to Kyverno.

I kindly request you to review my proposal, accessible at https://github.com/yashvardhanmishra/Enhancing-Kyverno-Sigstore-Cosign-Proposal , and provide feedback. Your mentorship would be invaluable, and I am eager to contribute and grow under your guidance.

Thank you for your time and consideration

[chipzoller]

For those coming here from the LFX Summer '23 mentorship, please ensure you formally apply.

[fool1280]

Hi everyone, my name is Anh Nguyen, and I’m a Computer Science student in the United States. I know it’s quite a bit late, but I just applied to the mentorship before it closed. I have a bit of working experiences interning at tech companies like Snapchat and Confluent, also contributed to small tasks and issues in other open sources projects. This will be my biggest attempt and commitment to a big feature, so I’m excited to learn from the codebase, the past PRs, and contribute to future PRs. If possible, would anyone please connecting me with the potential project mentor to learn about the next steps? Thank you!

[chipzoller]

The mentee application period is officially closed for the Summer term but will open for the Fall term in August.

[realshuting]

Are we done with all changes @vishal-chdhry ? Can we close it?

[vishal-chdhry]

@realshuting #8130 should close this