Software Supply Chain Transparency Log
sigstore
verify https assets with a public transparency log
transparencylog
Transparenty Immutable Container Image Tags
chainguard-dev