There's https://www.sigstore.dev/ - but looks like the focus is on containers mostly (rather than eg refusing to load/exec an untrusted dll or binary).

See also some related discussion here:

https://lwn.net/Articles/733431/