Vendor container images and only use signed ones

Create a pipeline to sync and sign container images or use custom builds, overriding images in the respective Kustomizations and Helm Charts