RSTUF, or Repository Service for TUF, is now an incubating project under the Open Source Security Foundation (OpenSSF). RSTUF can be integrated into CI/CD pipelines where, after building a package in a trusted environment, the pipeline automatically registers the artifact with RSTUF. The complexity of TUF implementation for the open source ecosystem is certainly a problem, but now tools like RSTUF make strong security practices accessible to a much wider audience.