CLI tool to add attestation identities to a pylock.toml file
Project description
pylock attestations
CLI tool to add attestation identities to a pylock.toml file.
[!IMPORTANT] This CLI is currently in alpha and not ready for production use.
Installation
Install using uv or pipx:
# with uv:
uv tool install pylock-attestations
# with pipx:
pipx install pylock-attestations
Usage
Run the pylock-attestations command inside a project folder containing
a pylock.toml file to update it in-place:
cd my_project/
pylock-attestations
You can also specify the input and output files:
cd my_project/
pylock-attestations -i pylock.old.toml -o pylock.new.toml
License
Copyright 2025 Trail of Bits
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file pylock_attestations-0.0.1a2.tar.gz.
File metadata
- Download URL: pylock_attestations-0.0.1a2.tar.gz
- Upload date:
- Size: 67.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.12.9
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e678e23a6a7bc04d16b6bf85ec20cf0abd39e1b502d71717393fd2249128cfe5
|
|
| MD5 |
c28d37566587b30e68fe217822ca821d
|
|
| BLAKE2b-256 |
12e135574b16c9620716ba9bfb8282b60b9b3f103ef5887c11fe6a1fcfa6cab8
|
Provenance
The following attestation bundles were made for pylock_attestations-0.0.1a2.tar.gz:
Publisher:
release.yml on trailofbits/pylock-attestations
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
pylock_attestations-0.0.1a2.tar.gz -
Subject digest:
e678e23a6a7bc04d16b6bf85ec20cf0abd39e1b502d71717393fd2249128cfe5 - Sigstore transparency entry: 213100781
- Sigstore integration time:
-
Permalink:
trailofbits/pylock-attestations@5a29a1525e91352de3ac8d32f62221d835c94231 -
Branch / Tag:
refs/tags/v0.0.1a2 - Owner: https://github.com/trailofbits
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@5a29a1525e91352de3ac8d32f62221d835c94231 -
Trigger Event:
release
-
Statement type:
File details
Details for the file pylock_attestations-0.0.1a2-py3-none-any.whl.
File metadata
- Download URL: pylock_attestations-0.0.1a2-py3-none-any.whl
- Upload date:
- Size: 73.4 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.12.9
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3c52894e302d4e542a0a091534da73f78fe36bab1a3359278644dbe1ee29692e
|
|
| MD5 |
d933bd187dd23cbbfd47a212f8c590e3
|
|
| BLAKE2b-256 |
a94a91bd10052a3e6cf8c3087db3c0536ea6570c4ccc9948d624be211dea9f6a
|
Provenance
The following attestation bundles were made for pylock_attestations-0.0.1a2-py3-none-any.whl:
Publisher:
release.yml on trailofbits/pylock-attestations
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
pylock_attestations-0.0.1a2-py3-none-any.whl -
Subject digest:
3c52894e302d4e542a0a091534da73f78fe36bab1a3359278644dbe1ee29692e - Sigstore transparency entry: 213100784
- Sigstore integration time:
-
Permalink:
trailofbits/pylock-attestations@5a29a1525e91352de3ac8d32f62221d835c94231 -
Branch / Tag:
refs/tags/v0.0.1a2 - Owner: https://github.com/trailofbits
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@5a29a1525e91352de3ac8d32f62221d835c94231 -
Trigger Event:
release
-
Statement type: