What are the best practices (if any) for coupling a docker image registry with a SCM service (such as bitbucket)?

I know a docker registry can live in [artifactory](https://www.jfrog.com/confluence/display/RTF/Docker+Registry), but how can I assure that the two are as tightly coupled as possible?  

For example I am worried that without due-diligence from developers the latest Docker image in the registry will not reflect the current state of the Dockerfile in SCM or vice-versa.  Also it is imperative that we can always trace back to the base Dockerfile (that we made) for any image in the registry.