Sigstore

Sigstore is a free, open-source service that provides tools and infrastructure for signing, verifying, and protecting software supply chains. It aims to enhance the security of open-source software by making it easier for developers to sign their software artifacts and for users to verify their authenticity.