Currently we require users to rebase to an unsigned image before rebasing yet again to the same image as signed. This limitation is due to the fact that we need the cosign public key and an updated policy.json in order to properly trust the image which would only exist in the image. Now that we have a CLI tool that is installed in all images created by it, we have the ability to pull that information and update the user's policy.json as needed.

Information for the source of the image is stored in the label org.opencontainers.image.source. We can use that information to get the cosign.pub file and use that to verify. After we verify the image, we can then update the policy.json and store the public key somewhere. I'm thinking /etc/pki/containers and set the filename to a hash of the file to keep uniqueness.