Sigstore is a powerful new technology for signing, verifying, and protecting software supply chains, and we’re very excited by today’s general availability announcement. Sigstore takes a new approach to solving these problems, and so figuring out exactly what it does and how to use it in your projects can be a bit tricky.

Read full article on Github