Please review the draft for March's report

[David A. Wheeler]

Press releases are not the best way to learn technical details :-).

I suggest adding a link to more details e.g.:

See <a href="https://sigstore.dev/what_is_sigstore/“>”What is sigstore"</a> for more details.

I think mentioning sigstore is value. Reproducible builds let you verify that
a given build *is* generated from a given source; sigstore can let you
verify that you got the *correct* source or build.

--- David A. Wheeler