A proof of concept integrating sigstore verification into bundle/gem install - View it on GitHub