This container can be pulled via:
  docker pull registry.opensuse.org/home/avicenzi/reproducible-builds/containerkiwi/demo-kiwi-image:20260508.0
  docker pull registry.opensuse.org/home/avicenzi/reproducible-builds/containerkiwi/demo-kiwi-image:20260508.0-4.32

Set DOCKER_CONTENT_TRUST=1 to enable image tag verification.