Sigstore: Roots of trust for software artifacts
Sigstore has become the default software signing method for everything from Kubernetes to NPM, Maven, and PyPi, verifying the integrity of more than a million open source packages.
Vint Cerf Brandon Phillip Certification Authority Browser Forum Transport Layer Security Certificate Transparency Binary Transparency
Source: infoworld.com