In setting up a build pipeline for an application intended to operate in Google Kubernetes Engine (GKE), your team prioritizes security to permit only images generated by the pipeline to be deployed to the GKE cluster. Which combination of Google Cloud services should be employed?