Cert chain verification for cosign

[brackend]

When verifying cosign signatures is it only ever using a public key? Is it possible to use a certificate to verify? My interest is in controlling admission using a CA to verify images signed with any of a number of issued end-entity certs.

I can only see public key verification in the documents. If anyone knows the answer could they share the documentation link with me?

I see that it is possible in Kyverno