sign docker images using docker content trust

[RaananHadar]

What is the goal / desired outcome?
improve pachyderms security and make it less susceptible to supply chain attacks. this will also improve pachyderm’s brand as using docker content trust is considered a good security practice for a serious project using dockerhub.
If there is a way to accomplish this today via workaround, what does that require?
i can build the images manually from source and sign them myself.
(Optional) What is your proposal for a feature to solve this?
implement docker content trust as part of your deployment pipeline.