github.com/shibumi/secure-supply-chain-example (go): Supply Chain Security does not need to be difficult
Keywords: cosign|fulcio|keyless|rekor|sbom|sigstore|supply-chain-security