Making the Internet more secure one signed container at a time(security.googleblog.com)
security.googleblog.com
Making the Internet more secure one signed container at a time
https://security.googleblog.com/2021/05/making-internet-more-secure-one-signed.html
Also — can the signature be uploaded to any registry or does that registry need to include a notary?