Reference

Lookup material that doesn't fit into a narrative page.

• Configuration — environment variables, config-file overrides, KMS URIs.
• Dependencies — third-party Go modules pulled in by cosign.

For per-command flag references, the canonical source is the auto-generated doc/cosign_*.md files in this repo (regenerated by make docgen). The most useful entry point there is doc/cosign.md, which links every subcommand.