# NEVER commit the cosign private key — it goes in the SIGNING_SECRET GitHub secret.
cosign.key
/.bluebuild-scripts_*