Update registry/remote/internal/configuration/evaluator.go

Signed-off-by: Terry Howe <terrylhowe@gmail.com>

Author: TerryHowe

registry/remote/internal/configuration/evaluator.go

@@ -103,11 +103,7 @@ func (e *Evaluator) evaluateReject(ctx context.Context, req *Reject, image Image
 // Note: This is a placeholder implementation. Full signature verification
 // would require integration with GPG/signing libraries.
 func (e *Evaluator) evaluateSignedBy(ctx context.Context, req *PRSignedBy, image ImageReference) (bool, error) {
-	// TODO: Implement actual signature verification
-	// This would involve:
-	// 1. Fetching the image manifest and signatures
-	// 2. Verifying signatures using the provided GPG keys
-	// 3. Checking identity matching rules
+	// TODO: Implement actual signature verification https://github.com/oras-project/oras-go/issues/1029
 	return false, fmt.Errorf("signedBy verification not yet implemented")
 }