This container can be pulled via:
  docker pull registry.opensuse.org/opensuse/factory/arm/totest/containers/opensuse/cosign:2.5.0
  docker pull registry.opensuse.org/opensuse/factory/arm/totest/containers/opensuse/cosign:2.5.0-11.165

Set DOCKER_CONTENT_TRUST=1 to enable image tag verification.