code: func CreateMaskedTrustedRemoteImage(t *testing.T, registryPrefix, repo, tag string) string {
  	t.Helper()
  	image := createTrustedRemoteImage(t, registryPrefix, repo, tag)
  	createNamedUnsignedImageFromBusyBox(t, image)
  	return image
  }
docs: // CreateMaskedTrustedRemoteImage creates a remote image that is signed with
  // content trust, then pushes a different untrusted image at the same tag.