chore: verify SLSA token at creation

Signed-off-by: Ian Lewis <[email protected]>

Author: ianlewis

actions/delegator/setup-generic/src/main.ts

@@ -132,8 +132,7 @@ async function run(): Promise<void> {
 
     // Verify just to double check.
     // NOTE: this is an offline verification.
-    // TODO(#1668): re-enable verification.
-    // await sigstore.verify(bundle, Buffer.from(unsignedB64Token));
+    await sigstore.verify(bundle, Buffer.from(unsignedB64Token));
     const bundleStr = JSON.stringify(bundle);
 
     const bundleB64 = Buffer.from(bundleStr).toString("base64");