docker: ghcr.io/IMAGENAME: use-sigstore-attachments: true