ublue-os org and signing with the ublue-os key so no custom policy required 
● ostree-image-signed:docker://ghcr.io/ublue-os/bluefin-dx:38
Digest: sha256:1df2b3521aa552b45686d5bb38b85fc01823259ca08d50004fc6b06cdda84950
Version: 38.20230719.0 (2023-07-19T20:56:45Z)
LocalPackages: 1password-8.10.8-1.x86_64ublue-os