GPG Signatures are performed with our GPG key. SBOMs are available on our GitHub Release page.Check out our installation guide for more details!