pub fn verify_cosign( archive: &Path, bundle: &Path, verbose: bool, ) -> Result<(), LinuxSignError>
Verify a cosign bundle.