audit, advisories and doctors/setup work

docs/examples/binary-diff/README.md

@@ -42,10 +42,19 @@ stella scan diff --base myapp:1.0.0 --target myapp:1.0.1
 
 # Generate attestation
 stella scan diff --base myapp:1.0.0 --target myapp:1.0.1 \
-  --mode=elf --emit-dsse=./attestations/
+  --mode=elf --emit-dsse=./attestations \
+  --signing-key=./keys/binarydiff.pem
 
-# Verify attestation
-stella verify attestation ./attestations/linux-amd64-binarydiff.dsse.json
+# Attach attestation to the image
+stella attest attach \
+  --image docker://myapp:1.0.1 \
+  --attestation ./attestations/linux-amd64-binarydiff.dsse.json
+
+# Verify attestation (example with cosign)
+cosign verify-attestation \
+  --type stellaops.binarydiff.v1 \
+  --key ./keys/binarydiff.pub \
+  docker://myapp:1.0.1
 ```
 
 ## Related Documentation