Usage of /build/reproducible-path/sigstore-go-0.6.2/debian/tmp/usr/bin/sigstore-go-signing:

-id-token string

OIDC token to send to Fulcio

-in-toto

Content to sign is in-toto document

-rekor

Including transparency log entry from Rekor

-tsa

Include signed timestamp from timestamp authority