GitHub Actions
1. Build and push Container image or Helm Chart on GitHub Actions
2. Signing with Cosign and Sigstore
3. Add integration on ReARM to Trigger GitHub Actions builds
4. Pull Request Validation and Commenting
5. Verify GitHub web-flow (web-UI) commit signatures
Make commits created through the GitHub web UI (the Merge button, edit-in-browser, etc.) verify in ReARM by enrolling GitHub's web-flow key on a committer.
