Build from source is a great idea, I assume you provide SLSA/sigstore like provenance as well?

The chainguard folks built sigstore :)

Yep yep, hence the ask, expected for containers, wondering if also for build from source.