An open source trusted cloud native registry that stores, signs, and scans content