https://repos.openssf.org/build-provenance-for-all-package-registries
Build Provenance for All Package Registries | wg-securing-software-repos
OpenSSF Working Group on Securing Software Repositories
build provenancefor allpackage registrieswgsecuring