Every image this repo ships is signed and carries its bill of materials

[ExtraToast]

Parent

#1289

What to build

Nothing signs the images this repository publishes and nothing records what went into them. Sign with keyless cosign under the workflow's own identity, and publish provenance and SBOM attestations alongside each image.

This is advisory until admission enforcement exists. Nothing stops the cluster running an unsigned image, and the gap should not be mistaken for a guarantee.

Acceptance criteria

• Every image published by this repository is signed, and the signature verifies against the workflow identity
• Provenance and SBOM attestations are attached to each image
• The verification command is written where an incident responder will find it
• The absence of admission enforcement is recorded as a known gap

Blocked by

None (can start immediately).