PolicyController before 0.2.1 may bypass attestation verification in github.com/sigstore/policy-controller