Comment by eatmyshorts

OCI registries.

Harbor + Notary + admission controllers - AKA private image repository with image signing.

Sigstore. Another method for signing & verifying artifacts.