Def check out the gitsign project mentioned in the post: https://github.com/sigstore/gitsign