Linux Foundation, along with Red Hat, Google and Purdue University have announced Sigstore Project and are leading the efforts to provide developers with a secure cryptographic method of signing software, such as release files, container images and binaries.
Source: SEO Chat
Link: Linux Foundation Lead Sigstore Project Enabling Secure Signing of Software