White paper on best practices for signing code

Would like to share white paper on best practices for signing code using hardware security modules (HSMs). Appreciate if someone can indicate where is the best place to share this information with the community.

Thank you, JA