pub const COSIGN_VERSION: &str = "v2.4.1";Expand description
Pinned cosign release used by the cloud-init verify-blob block. Bump in
lockstep with COSIGN_SHA256_AMD64 / COSIGN_SHA256_ARM64 when
upgrading the verifier — supply-chain hygiene (W203 §1.4, R330-F22).