Merge pull request #32 from github/default-github-prod

Use github trust root as default

Author: codysoyland

Diff for: charts/trust-policies/Chart.yaml

@@ -8,8 +8,8 @@ sources:
 type: application
 
 name: trust-policies
-version: "v0.1.0"
-appVersion: "v0.1.0"
+version: "v0.2.0"
+appVersion: "v0.2.0"
 
 maintainers:
   - name: codysoyland

Diff for: charts/trust-policies/templates/clusterimagepolicy-github.yaml

@@ -8,9 +8,12 @@ spec:
   - glob: "**"
   authorities:
   - keyless:
+      trustRootRef: github
       identities:
       - issuer: https://token.actions.githubusercontent.com
         subjectRegExp: https://github.com/{{ .Values.policy.organization }}/{{ .Values.policy.repo }}/\.github/workflows/.*
+    rfc3161timestamp:
+      trustRootRef: github
     signatureFormat: bundle
     attestations:
     - name: require-attestation