Sigstore will make code signing free and easy for software developers, providing an important first line of defense.