NEWS: New @projectsigstore offers free signing service to developers to confirm origin and authenticity of software. Effort led by @redhat @google and Purdue https://t.co/uoZDiELlXq #oss #security