All Container images are signed before submission to the Container Registry ()