up

src/Attestor/StellaOps.Attestor/StellaOps.Attestor.Infrastructure/Signing/AttestorSigningKeyRegistry.cs

@@ -235,6 +235,10 @@ internal sealed class AttestorSigningKeyRegistry : IDisposable
             }
 
             var privateKeyBytes = LoadSm2KeyBytes(key);
+            var metadata = new Dictionary<string, string?>(StringComparer.OrdinalIgnoreCase)
+            {
+                ["source"] = "config"
+            };
             var signingKey = new CryptoSigningKey(
                 new CryptoKeyReference(providerKeyId, providerName),
                 normalizedAlgorithm,