[nikolay]

That's what' Aqua [0] does plus more!

[0]: https://aquaproj.github.io/

[westurner]

From https://aquaproj.github.io/ :

> aqua installs tools securely. aqua supports Checksum Verification, Policy as Code, Cosign and SLSA Provenance, GitHub Artifact Attestations, and Minisign. Please see Security.