Merge pull request #11 from ublue-os/verify

feat(ci): Verify base image with cosign before building

.github/workflows/build.yml

@@ -53,13 +53,18 @@ jobs:
           - image_name: lazurite
             major_version: 38
     steps:
-      - name: Maximize build space
-        uses: ublue-os/remove-unwanted-software@v6
-
       # Checkout push-to-registry action GitHub repository
       - name: Checkout Push to Registry action
         uses: actions/checkout@v4
 
+      - name: Verify base image
+        uses: EyeCantCU/cosign-action/[email protected]
+        with:
+          containers: ${{ matrix.image_name }}-asus:${{ matrix.major_version }}
+
+      - name: Maximize build space
+        uses: ublue-os/remove-unwanted-software@v6
+
       - name: Matrix Variables
         run: |
             REPO=${{ github.repository }}