Keyless Git signing using Sigstore
Why do you think that https://github.com/in-toto/attestation is a good alternative to gitsign
Keyless Git signing using Sigstore
Why do you think that https://github.com/in-toto/attestation is a good alternative to gitsign