Sigstore: Free service to sign and verify software supply chain artifacts | Hacker News Reader