Sigstore is pretty useful on it's own as a way to sign and verify software, but it can also be used to build higher level applications like this one.

Happy to answer questions!