Docker images released from Thought Machine are signed using the tm-release-attestor. This provides assurance in the supply chain that the images were built and verified by Thought Machine.
The tm-release-attestor is used to sign images which have been built, tested, security-verified and quality assured.