sigstore (pypi): A tool for signing Python package distributions
Keywords: codesigning|python|security|supply-chain