Changelog
You can verify the signatures of both the checksums.txt file and the published docker images using cosign.
cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pubcosign verify us-docker.pkg.dev/fairwinds-ops/oss/rbac-manager:v1.10.2 --key https://artifacts.fairwinds.com/cosign-p256.pub