An open-source specification that secures software updates has just become the ninth Cloud Native Computing Foundation project to graduate to top-level status.