sigstore: support signing and verification artifacts via transparency log · Issue #19748 · gradle/gradle
Expected Behavior Gradle should be able to sign and verify artifact signatures. Of course, it would take time to migrate off PGP for Maven Central, however, having off the shelf sigstore support in...