Kubernetes taps Sigstore to thwart open-source software supply chain attacks – ZDNet