ability to sign Rego policies before pushing them to the OCI registry

[developer-guy]

Hi, we (w/@Dentrax) thought that it'd be nice to add the ability to sign Rego policies before pushing them to the OCI registry by using the cosign¹ project under the hood. A while ago, we opened a similar issue to the ÒPA Gatekeeper`² project.

Footnotes

1. https://github.com/sigstore/cosign ↩

2. https://github.com/open-policy-agent/gatekeeper/issues/1491 ↩

[jpreese]

Makes sense to me, would be a welcomed enhancement!

[developer-guy]

would you mind assigning it to us, then we can start to work on it 🤩