New Code Signing Service sigstore

Determining the origin and authenticity of open-source code is one of its disadvantages. This is also the reason why it...