Look into using sigstore or similar

[twiss]

Rather than creating a new transparency log, we could evaluate whether sigstore would be sufficient for our purposes.

[elimisteve]

Exactly what I came here to suggest! Seems like a good fit. 👍