Trusted builds Dockerfile