What is the problem you're trying to solve

The builds we provide for a given containerd release are not attested in terms of how they were built or who built them.

Describe the solution you'd like

GitHub has launched Artifact Attestations built on sigstore to sign artifacts built using GitHub Actions.

Additional context

No response