Thanks for pointing this out - seems like another step by corporates towards stepping up control over open source software. I'd rather have someone like the Free Software Foundation and EFF to be in charge of these kinds of things.
The legal entity here is the Linux Foundation.
As they’ve said, this seems like LetsEncrypt for software signing.
I found out about this project 30 mins ago and honestly it sounds great. it would be awesome for us to roll this out even for our internal libraries.