Comparing In-Toto and Sigstore: Two Approaches to Software Supply Chain Security · HackerTrans