1. A method, comprising: receiving an indication to commit a first containerized image to an image repository, wherein the first containerized image is extended from a second containerized image and comprises a plurality of image layers including a first image layer and a plurality of image layers of the second containerized image; validating the first containerized image by: determining that: (i) the second containerized image is associated with a first node of a first tree data structure, (ii) the first image layer is not associated with any nodes of the first tree data structure, and (iii) each remaining image layer of the first containerized image is associated with a respective node of the first tree data structure; generating a first signature value for the first containerized image; generating a second node in the first tree data structure, wherein the second node stores an indication of the first signature value, the first containerized image, and an ordered list of each of the plurality of image layers of the first containerized image: and committing the first containerized image to the repository by operation of a computer processor.