Geo: Verification of container repositories
Container Repository stores data in CAS storage (content addressable storage) so the content itself is validated but there are cases when Registry could fail to fire a notification for image push or delete, so the repository can be outdated on secondary. We can only compare the list of tags (including their digests).
Suggestion
Implement SSF verification
Edited by Valery Sizov