Sigstore is a Linux Foundation project developed by Google and Red Hat for code signing

Sigstore is a new Linux Foundation project described as “Let’s Encrypt for Code Signing”. The tool is developed by Google, Red Hat, and Smallstep, and is designed to offer better provenance for code. Read more…
Neowin