Wrote an article
https://cloud.google.com/architecture/secure-software-supply-chains-on-google-kubernetes-engine