Check how dependencies in Weblate Docker image are verified before the image is published

• List actors involved in the code distribution chain
• List whether code verification is (or not) in place
• Make sure this is documented somewhere