Sigstore and cosign are so simple to use. I setup all the containers I maintain to be signed (This is done within the Github Action).

https://github.com/chimbosonic/hagrid-container