i think these public attestation signing are cool for published artifacts. does anyone else?
https://search.sigstore.dev/?logIndex=1187915865
created from this release
https://github.com/xero/leviathan-crypto/releases/tag/v1.1.0