# Securely Signing WebAssembly Components with Cosign (OIDC)

DevFeed: [Securely Signing WebAssembly Components with Cosign (OIDC)](<https://devfeed.tech/articles/securely-signing-webassembly-components-with-cosign-oidc-15432.md>)

Original publisher: [Read original article](<https://wasmcloud.com/blog/2025-09-02-securely-signing-wasm-components-with-cosign-oidc/>)

Author: Liam Randall

Published: 2025-09-02T00:00:00Z

Content type: tutorial

Language: en

Sources: [wasmCloud Blog](<https://devfeed.tech/sources/wasmcloud-blog.md>)

Topics: [WebAssembly](<https://devfeed.tech/topics/web-assembly.md>), [sigstore](<https://devfeed.tech/topics/sigstore.md>), [GitHub Container Registry](<https://devfeed.tech/topics/github-container-registry.md>), [OpenID connect (OIDC)](<https://devfeed.tech/topics/oidc.md>), [Rust](<https://devfeed.tech/topics/rust.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [cli](<https://devfeed.tech/tags/cli.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [github-container-registry](<https://devfeed.tech/tags/github-container-registry.md>), [integrity](<https://devfeed.tech/tags/integrity.md>), [oci-registry](<https://devfeed.tech/tags/oci-registry.md>), [oidc](<https://devfeed.tech/tags/oidc.md>), [registry](<https://devfeed.tech/tags/registry.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [verify](<https://devfeed.tech/tags/verify.md>), [wasi](<https://devfeed.tech/tags/wasi.md>), [wasm-components](<https://devfeed.tech/tags/wasm-components.md>), [wasmcloud](<https://devfeed.tech/tags/wasmcloud.md>), [webassembly](<https://devfeed.tech/tags/webassembly.md>), [webassembly-wasmcloud-security-cosign-oidc-signing-oci-registry-supply-chain-security-wasi-wasm-comp](<https://devfeed.tech/tags/webassembly-wasmcloud-security-cosign-oidc-signing-oci-registry-supply-chain-security-wasi-wasm-comp.md>)

## AI overview

A tutorial showing how to build a Rust-based WebAssembly component, sign it with Sigstore Cosign using OIDC identity, push it to GitHub Container Registry, and verify it before execution.

## Source excerpt

Build, sign, and verify WebAssembly component artifacts using Sigstore's cosign with OIDC identity--secure, registry-native signatures for wasmCloud.