The release pipeline signs the SBOM for the original image digest, but a last-minute rebuild produces a new digest that goes out unsigned

Every compliance report points at a valid attestation, just not for the image that actually ships.