@google open source security team, maintainer of tuf-on-ci and python-tuf for @theupdateframework; maintainer of sigstore-python and root-signing for @sigstore