in-toto Attestation Framework
Why do you think that https://github.com/sigstore/gitsign is a good alternative to attestation
in-toto Attestation Framework
Why do you think that https://github.com/sigstore/gitsign is a good alternative to attestation