occam-gitignore
Deterministic, content-addressed .gitignore generator. Given the same project
tree, always produces the same output — byte-for-byte — with a provenance_hash
header so any third party can verify the result was generated by an honest
implementation of the algorithm.
pipx install occam-gitignore
occam-gitignore generate /path/to/repo > .gitignore
Why deterministic?
A .gitignore is part of your repo's reproducible build surface. If two
checkouts of the same commit produce different ignore files, your CI is lying.
occam-gitignore fingerprints the project tree, runs a pure function over a
content-addressed templates table + a versioned mined-rules table, and emits an
ignore file annotated with hashes of every input. No I/O ordering, no clock,
no hostname.
Guarantees
- Determinism: identical inputs ⇒ identical bytes (UTF-8, LF, single trailing newline). Property-tested with Hypothesis (P1–P7) and validated by a 32-case conformance suite that any external implementation can run.
- Content addressing: templates and rules table carry
sha256:<12-hex>versions; mismatched declarations are rejected at load time. - Provenance: every emitted
.gitignoreincludes a header with the fullprovenance_hash(Merkle of core + templates + rules_table + content) so drift is onegrepaway. - Supply chain: every release ships with an SPDX SBOM and a SLSA Level 3 build provenance attestation.
Links
- Source: https://github.com/fabriziosalmi/gitignore
- Conformance spec: see
conformance/SPEC.md - Algorithm reference: pure Python in
occam-gitignore-core
MIT licensed.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file occam_gitignore-0.3.0.tar.gz.
File metadata
- Download URL: occam_gitignore-0.3.0.tar.gz
- Upload date:
- Size: 8.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5a129d1627f82237c00f117b8ee6855a35659d42da7ef9876fda33257f337c86
|
|
| MD5 |
b11136485f7801cc2fdff03c16ce14b3
|
|
| BLAKE2b-256 |
460714992b838f240fb44e81d9135aeed1bdfdcfdc5b3a478df6b898e938e65e
|
Provenance
The following attestation bundles were made for occam_gitignore-0.3.0.tar.gz:
Publisher:
release.yml on fabriziosalmi/occam-gitignore
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
occam_gitignore-0.3.0.tar.gz -
Subject digest:
5a129d1627f82237c00f117b8ee6855a35659d42da7ef9876fda33257f337c86 - Sigstore transparency entry: 2198645301
- Sigstore integration time:
-
Permalink:
fabriziosalmi/occam-gitignore@e7f9d2ecac057085ba9bc9400760422cf7be0496 -
Branch / Tag:
refs/tags/v0.3.0 - Owner: https://github.com/fabriziosalmi
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@e7f9d2ecac057085ba9bc9400760422cf7be0496 -
Trigger Event:
push
-
Statement type:
File details
Details for the file occam_gitignore-0.3.0-py3-none-any.whl.
File metadata
- Download URL: occam_gitignore-0.3.0-py3-none-any.whl
- Upload date:
- Size: 12.6 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
06831c97dc5498d96c8239779134608951b2a691a59e3c5581398a9a2cdd20da
|
|
| MD5 |
0ff6643733ca2b0e5d5dea5a55140027
|
|
| BLAKE2b-256 |
0b9c7cadb5619b715a16139cf45af52f88daf78256c0e9d387ca3707e17cee73
|
Provenance
The following attestation bundles were made for occam_gitignore-0.3.0-py3-none-any.whl:
Publisher:
release.yml on fabriziosalmi/occam-gitignore
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
occam_gitignore-0.3.0-py3-none-any.whl -
Subject digest:
06831c97dc5498d96c8239779134608951b2a691a59e3c5581398a9a2cdd20da - Sigstore transparency entry: 2198344934
- Sigstore integration time:
-
Permalink:
fabriziosalmi/occam-gitignore@656663ee24b08419128658ec530975009e21c26c -
Branch / Tag:
refs/tags/v0.3.0 - Owner: https://github.com/fabriziosalmi
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@656663ee24b08419128658ec530975009e21c26c -
Trigger Event:
push
-
Statement type:
