Is Sigstore susceptible to psychic signatures? Sources say: sounds suspect

Sigstore isn’t affected by the psychic signature vulnerability in Java, as it uses Go cryptography libraries and rejects signatures in its Rekor transparency log