Sigstore

Misc ideas for sigstore

Monitor

Needs a monitor given a type and upstream

Migrate kernel.org transparency log?

Needs git-push certificate support

.pkg.tar support

Native support for pacman, obviously :)