Link: https://blog.trailofbits.com/2022/11/08/sigstore-code-signing-verification-software-supply-chain
Tags: #todo #sec