i think these public attestation signing are cool for published artifacts. does anyone else? https://search.sigstore.dev/?logIndex=1187915865 created from this release https://github.com/xero/leviathan-crypto/releases/tag/v1.1.0