Decentralized Attestation Storage and Retrieval for Software Supply Chains