We cannot download binary programs and then run them during the build.
We would need to build cosign in Fedora first.