Robuta

https://www.linuxfoundation.org/press/sigstore-announces-general-availability-at-sigstorecon
Today at SigstoreCon, the Sigstore community announced the general availability of its free software signing service giving open source communities access to...
general availabilitysigstoreannounces
https://docs.sigstore.dev/signing/quickstart
Sigstore empowers software developers to securely sign software artifacts and record signatures in a tamper-resistant public log.
foundsigstore
https://openssf.org/projects/sigstore/
open source securitysigstorefoundation
https://training.linuxfoundation.org/training/securing-your-software-supply-chain-with-sigstore-lfs182/
Oct 31, 2024 - Delve into software integrity with the Sigstore toolkit, exploring automated signing and verification of various digital assets.
software supply chainlinux foundationsecuringsigstore
https://www.sigstore.dev/
sign. verify. protect. Make sure your software is what it claims to be.
sigstore