File _servicedata of Package cosign
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/sigstore/cosign</param>
<param name="changesrevision">37fbfc7018fb4d60a9a2c9175bd64c75dda5869a</param></service></servicedata>