Mise has a registry on git with checksums and signatures. Ideally we should be there. I might have a look on how to add ccm there.