Flux Mirror: declarative, cosign-verified OCI artifact relocation
Flux released Mirror, a CNCF Apache-2.0 CLI plugin that relocates container images, Helm charts, and OCI artifacts into your own registries from declarative config. It enforces cosign keyless signature verification (OIDC identity, signature age) before copying and carries SBOMs and provenance as OCI referrers. A deliberate answer to upstream rate limits and disappearing catalogs.