Would like to hear from everyone: How are you dealing with PRs in 2026? It's our biggest bottle neck.

We are considering looking into attestations, e.g. through the SLSA spec: https://slsa.dev/ to ensure build provenance and verification before it is deployed.