Repository Service for TUF (RSTUF) is a system for securing content downloads from tampering between the repository and the client (for example, by an on-path attacker).
RSTUF is a Sandbox project sponsored by OpenSSF Securing Software Repositories Working Group