Skip to main content

darnit-gittuf

Gittuf policy checks plugin for darnit.

Provides three controls:

  • GT-01.01 GittufInitialized — checks .gittuf/policy.json and .gittuf/root.json exist
  • GT-01.02 GittufPolicyValid — runs gittuf verify-ref HEAD
  • GT-02.01 CommitsSigned — checks last 5 commits are cryptographically signed

Metadata

Release files for darnit-gittuf 0.1.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for darnit-gittuf 0.1.1
File Size Uploaded Provenance Actions
darnit_gittuf-0.1.1.tar.gz 5.2 kB Without provenance Details for darnit_gittuf-0.1.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for darnit-gittuf 0.1.1
File Interpreter ABI Platform Actions
darnit_gittuf-0.1.1-py3-none-any.whl Python 3 none any Details for darnit_gittuf-0.1.1-py3-none-any.whl

Total release size: 11.6 kB

Release files / darnit_gittuf-0.1.1.tar.gz

Download URL darnit_gittuf-0.1.1.tar.gz
Size 5.2 kB
Tags Source
SHA-256 checksum
How to use checksums
d8a6f319aa6266798fc9e12679f3ad5b78b1005e60bc3e953a9960ee454cbce7
BLAKE2b-256 checksum
How to use checksums
cffa754ae98ff315ef09dc04101e0aa3a00e741fabb51644bdc389bb6103d0ae
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.13.14

Release files / darnit_gittuf-0.1.1-py3-none-any.whl

Download URL darnit_gittuf-0.1.1-py3-none-any.whl
Size 6.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
e6d5f6ad991bb5ed34fe65c59d9e51f56f1d8e93a9f5646d19ddfb4c7b55bd87
BLAKE2b-256 checksum
How to use checksums
4dec88ea22832cbd3791cc986863b90ae8475cfd8ef8482d0e84acd99247fcd9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/7.0.0 CPython/3.13.14

Security for darnit-gittuf 0.1.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.1.1 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page