Sigstore — Let’s Encrypt, But for Code Signing

In March 2024, a backdoor was discovered in XZ Utils — a compression library installed on virtually every Linux system on earth. A…