You can probably use an Admission Controller with the ImagePolicyWebhook.

https://kubernetes.io/docs/reference/access-authn-authz/admi...