diff --git a/system_files/shared/etc/containers/policy.json b/system_files/shared/etc/containers/policy.json
index 20be49f..46be250 100644
--- a/system_files/shared/etc/containers/policy.json
+++ b/system_files/shared/etc/containers/policy.json
@@ -41,6 +41,17 @@
                     }
                 }
             ],
+            "ghcr.io/get-aurora-dev": [
+                {
+                    "type": "sigstoreSigned",
+                    "keyPaths": [
+                        "/usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub"
+                    ],
+                    "signedIdentity": {
+                        "type": "matchRepository"
+                    }
+                }
+            ],
             "": [
                 {
                     "type": "insecureAcceptAnything"
diff --git a/system_files/shared/etc/containers/registries.d/ghcr.io-get-aurora-dev.yaml b/system_files/shared/etc/containers/registries.d/ghcr.io-get-aurora-dev.yaml
new file mode 100644
index 0000000..3b4a936
--- /dev/null
+++ b/system_files/shared/etc/containers/registries.d/ghcr.io-get-aurora-dev.yaml
@@ -0,0 +1,3 @@
+docker:
+  ghcr.io/get-aurora-dev:
+    use-sigstore-attachments: true
diff --git a/cosign.pub b/system_files/shared/usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub
similarity index 100%
rename from cosign.pub
rename to system_files/shared/usr/lib/pki/containers/ghcr.io-get-aurora-dev.pub