Verify the jaas container image and release archives with cosign keyless signatures before deploying.