https://tsecurity.de/de/1406136/IT+Sicherheit/Cybersecurity+Nachrichten/A+new+Linux+Foundation+open+source+signing+tool+could+make+secure+software+supply+chains+universal/