You manage an application deployed on GKE clusters across multiple environments, using Cloud Build for user acceptance testing (UAT). Artifact Analysis is integrated with Cloud Build , and the Binary Authorization API is enabled in all Google Cloud projects for your environments. To ensure that only container images passing specific UAT tests are deployed to production, and with an attestor already created, what should you do next?