What kind of request is this?

Improvement of existing experience

What is your request or suggestion?

The release artifacts from this repo are not currently signed.
The only artifacts we currently produce are container images.
While image signing isn't exactly standardized, we can take some existing patterns from the community to do that signing.

As an example, cosign can be used to sign images with OIDC tokens from github actions.

Are you willing to submit PRs to contribute to this feature request?

• Yes, I am willing to implement it.