Sigstore: Roots of Trust for Software Artifacts | Hacker News Reader