I wrote down a few points about my experience using Sigstore to secure our K8s platform. Let me know if you have any questions or ideas to improve!