Platform & DevOps·Secrets, identity and the supply chain
you can prove which commit, which builder and which inputs produced this exact image, from a signed statement rather than a wiki page.
Build provenance
Also calledprovenance, build attestation, SLSA provenance
A signed record generated by the build system describing what was built, from what source, by which builder, with what inputs. It answers the question a security incident actually asks — where did this artefact come from — without relying on anyone's memory. Its trustworthiness comes from being produced by the build platform rather than by the build script, since a script an attacker controls can claim anything.