check github oidc provider agains fulcio

Signed-off-by: Javan lacerda <[email protected]>

.github/workflows/verify.yml

@@ -92,3 +92,16 @@ jobs:
         run: |
           set -e
           go test -timeout 30s -run ^TestLoadFulcioConfig$ github.com/sigstore/fulcio/pkg/config
+  
+  signing:
+    name: signing
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/checkout@v3
+      - name: install
+        run: python -m pip install .
+      - uses: sigstore/[email protected]
+        with:
+          inputs: main.go