Sigstore driver doesn't recursively sign #704
Description
My images have keys for may current image and its base image. I build these with the sigstore driver, which apparently only signs the manifest of the images. We need to recursively sign all digests in the manifest.
Error:
[1/6] STEP 1/1: FROM registry.gitlab.com/wunker-bunker/wunker-os/combo-nvidia AS jp-desktop-nvidia
Trying to pull registry.gitlab.com/wunker-bunker/wunker-os/combo-nvidia:latest...
Error: creating build container: unable to copy from source docker://registry.gitlab.com/wunker-bunker/wunker-os/combo-nvidia:latest: copying system image from manifest list: Source image rejected: A signature was required, but no signature exists