What is keeping contributors from adding malware to Rocky Linux? The answer is simple. Transparency! All of the builds can be audited and everything is signed with GPG keys.