performed on each of these signatures:
  - The cosign claims were validated
  - The signatures were verified against the specified public key
  - Any certificates were verified against the Fulcio roots.

[{&#34;critical&#34;:{&#34;identity&#34;:{&#34;docker-reference&#34;:&#34;gcr.io/istio-release/pilot&#34;},&#34;image&#34;:{&#34;docker-manifest-digest&#34;:&#34;sha256:c37fd83f6435ca0966d653dc6ac42c9fe5ac11d0d5d719dfe97de84acbf7a32d&#34;},&#34;type&#34;:&#34;cosign container image signature&#34;},&#34;opti