Is your feature request related to a problem? Please describe.
We need to certify integrity and provenance of docker images and charts
Describe the solution you'd like
Use sigstore to sign the binaries we are providing
Describe alternatives you've considered
none