In order for sigstore-conformance to test DSSE signing (sigstore/sigstore-conformance#145), clients are required to accept from the conformance testing suite an in-toto statement and sign it as an attestation.
Given such a statement, the conformance CLI should call KeylessSigner.attest(statement).