Kubernetes taps Sigstore to thwart open-source software supply chain attacks

The Kubernetes project takes a step forward in shielding users from supply chain attacks on its users.