Feature: Docker image sign

[alita1991]

Summary

This feature would enhance the release process for Docker images by incorporating automatic signing, providing an extra layer of security and trustworthiness.

Use case

As a developer, I often rely on Semantic-Release for automated versioning and release management. However, I also utilize Docker extensively for containerization and deployment. Having the Docker Sign feature within Semantic-Release would streamline the release process, ensuring that Docker images are signed automatically and consistently.

Benefits

1. Security
2. Trustworthiness
3. Automation

Command used to sign the Docker image

One way to sign the Docker image is by using cosign:

cosign sign -y --key cosign.key "${RELEASE_IMAGE_WITH_SHA256}"