• https://socket.dev
• https://www.sigstore.dev
• https://in-toto.io
• https://theupdateframework.io