INTRODUCING ARTIFACT ATTESTATIONS – NOW IN PUBLIC BETA

Summary from the TLDR newsletter

GitHub's Artifact Attestations allows project maintainers to create a tamper-proof, unforgeable paper trail linking their software to the process that created it. It creates metadata that can be used as a foundation for new security and validity checks through policy evaluation. Verification support will be expanded to the Kubernetes ecosystem later this year.