Convert between Sigstore Bundles and PEP-740 Attestation objects
https://github.com/trailofbits/pypi-attestations/