docker: localhost:5000/sigstore-signed: use-sigstore-attachments: true