A simple demo of using cosign with kyverno policies to enforce image signing - View it on GitHub