Harbor + Notary + admission controllers - AKA private image repository with image signing.
Sigstore. Another method for signing & verifying artifacts.