Repository signing with Kairo De Araujo

I recently had a chat with Kairo about a project he maintains called Repository Service for TUF (RSTUF). We explain why TUF is tough (har har har), what RSTUF can do, and some of the challenges around securing repositories.
The show notes and blog post for this episode can be found at opensourcesecurity.io/2025/2025-05-rstuf-with-…