The software supply chain security tool from GitHub and Google uses GitHub Actions and Sigstore to generate a "tamper-proof" record describing where, when, and how the software is produced.

The public preview arrives amid a surge of investment from leading tech companies in AI-powered coding assistants.