cosign verify \
  --certificate-identity-regexp="https://github.com/flamed-us/node-fips" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  ghcr.io/flamed-us/node-fips:20

# Expected results (example)
# - signature verified
# - transparency log inclusion proof
# - subject digest printed