`gh attestation verify` said yes to an image we never released

The four questions, and the one nobody asks Pulling a container image somebody else built asks four separate questions. Most people answer three of them and skip the fourth: Step Question it answers If you skip it Fetch by digest are these the bytes I asked for you are gambling on a mutable tag Verify provenance who built these bytes, from what,...