Description

#2904 proposed support for attaching a Rekor response/bundle to a container. However, there's no support for outputting a bundle with cosign sign (code), only sign-blob (code). This supports use-cases where a signer does not want to attach metadata immediately to the container.