If you look at the GitHub announcement in the looking ahead section it says this:

> Working with other cloud CI/CD providers to add support for provenance signing

So hopefully they make good on that point.

https://github.blog/2023-04-19-introducing-npm-package-prove...