A New Tool Wants to Save Open Source from Supply Chain Hacks

Sigstore will make code signing free and easy for software developers, providing an important first line of defense.

from Wired https://ift.tt/3vMuYid
via Gabe's Musing's