FROM quay.io/buildah/upstream:latest

# Add skopeo.
RUN dnf install -y skopeo \
    --exclude container-selinux \
    --enablerepo=updates-testing

# Add wget, use it to install cosign.
RUN dnf install -y wget && \
    wget https://github.com/sigstore/cosign/releases/download/v2.5.2/cosign-2.5.2-1.x86_64.rpm && \
    rpm -ivh cosign*.rpm