docs: add 'Signature Verification' guide

[nikpivkin]

Description

Related issues

• Close Adding "Signature Verification" Guide to verify signed binaries #3881

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[knqyf263]

@nikpivkin LGTM! Thanks 👍

@AnaisUrlichs Where do we want to add this page? NIkita added it to "getting started".

[AnaisUrlichs]

I would like to add that to supply-chain https://aquasecurity.github.io/trivy/v0.43/docs/supply-chain/sbom/
what do you think @knqyf263

[itaysk]

no supply chain is about how trivy is securing the supply chain. this should be somewhere around the installation docs

[knqyf263]

It is not a functionality of Trivy. As @itaysk, it is more like installation, but I want to keep the installation page as much as simple so that people can easily start using Trivy. Should we add a new page under getting started?

[itaysk]

If not under installation, maybe under "advanced"? we also have air-gapped setup guide there

[AnaisUrlichs]

Oh sorry, I did not look at the PR properly -- maybe under a separate page e.g. https://aquasecurity.github.io/trivy/v0.43/trivy-signature-verification

[nikpivkin]

@itaysk @AnaisUrlichs Okay, I'll wait for your decision and move the documentation to the appropriate section.

[github-actions]

This PR is stale because it has been labeled with inactivity.

[itaysk]

sorry for the delay, under installation please