Update docs for cosign v2 (#725)

Verified both getting started and signed provenance tutorials.
tektoncd · Feb 25, 2023 · 555cdda · 555cdda
1 parent c3d0f04
commit 555cdda
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/docs/tutorials/getting-started-tutorial.md b/docs/tutorials/getting-started-tutorial.md
@@ -87,11 +87,20 @@ tkn tr describe --last -o jsonpath="{.metadata.annotations.chains\.tekton\.dev/s
 
 Finally, we can check the signature with [cosign]:
 
+```shell
+$ cosign verify-blob-attestation --insecure-ignore-tlog --key k8s://tekton-chains/signing-secrets --signature sig --type slsaprovenance --check-claims=false /dev/null
+Verified OK
+```
+
+<details><summary>If using Cosign v1</summary>
+
 ```shell
 $ cosign verify-blob --key k8s://tekton-chains/signing-secrets --signature sig sig
 Verified OK
 ```
 
+</details>
+
 Now we have a verifiable record of the `TaskRun`!
 
 ## What you just created