Thanks to the Solarwinds security blunders, we’re all aware now of how vital it is to protect our software supply chain from unauthorized changes. Now, the Linux Foundation and partners have created a new free cryptographic software signing to improve open-source program security.