From 7b2a3cd96a0acf6eb978ae02ab163092c8873585 Mon Sep 17 00:00:00 2001
From: xynydev <60004820+xynydev@users.noreply.github.com>
Date: Wed, 21 Feb 2024 18:56:27 +0200
Subject: [PATCH] docs: add verification message

---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index 30cab02..22dac4d 100644
--- a/README.md
+++ b/README.md
@@ -39,3 +39,11 @@ To run the action, simply edit the `boot_menu.yml` by changing all the reference
 The Action currently uses [ublue-os/isogenerator-old](https://github.com/ublue-os/isogenerator-old) and works in a similar manner to the official Universal Blue ISO. If you have any issues, you should first check [the documentation page on installation](https://universal-blue.org/installation/). The ISO is a netinstaller and should always pull the latest version of your image.
 
 Note that this release-iso action is not a replacement for a full-blown release automation like [release-please](https://github.com/googleapis/release-please).
+
+## Verification
+
+These images are signed with [Sigstore](https://www.sigstore.dev/)'s [cosign](https://github.com/sigstore/cosign). You can verify the signature by downloading the `cosign.pub` file from this repo and running the following command:
+
+```bash
+cosign verify --key cosign.pub ghcr.io/blue-build/legacy-template
+```