File _servicedata of Package rekor
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/sigstore/rekor</param>
<param name="changesrevision">cb5b1d5f364a8437e1c6c857b200283e2dcc2b29</param></service></servicedata>