Sigstore: A Solution to Software Supply Chain Security