reliastra (PyPI package)
RELIASTRA command-line client — probes, verdicts, evidence records, public
verification. This package is a thin installer, not a port. The CLI is a
single Go binary built and released from
github.com/ReliaAstra/Reliastra
(cli/); this package downloads that binary and runs it. The same binary is
also on npm (npm install -g reliastra) and via
go install github.com/ReliaAstra/Reliastra/cli/cmd/reliastra@latest.
pipx install reliastra # recommended: isolated, on PATH
# or
pip install reliastra
reliastra --version # downloads the binary on first run, then prints e.g. 0.2.0
reliastra --help
How it works
- The wheel is pure Python, identical on every platform, standard library only, and has no build hooks — nothing is downloaded or executed at install time.
- On the first
reliastrainvocation the package downloadsreliastra_<version>_<os>_<arch>over HTTPS from the GitHub release whose tag equals this package's version (v<version>), verifies its SHA-256 against that release'schecksums.txt, caches it with executable permission, and runs it with your arguments. A mismatch is discarded and nothing is executed. - The cache is per version and shared with the npm package:
~/.cache/reliastra(Linux, or$XDG_CACHE_HOME/reliastra),~/Library/Caches/reliastra(macOS),%LOCALAPPDATA%\reliastra\Cache(Windows). Upgrading the package downloads the new version once. - Exit codes,
--json,--help,--versionare the Go CLI's own — the package only passes them through.python -m reliastrais the same entry point as thereliastraconsole script.
Supported platforms
Linux, macOS, Windows on amd64 (x86_64) and arm64 (aarch64 / Apple
silicon); Python ≥ 3.9. On any other platform the package exits with a
message instead of guessing — use
go install github.com/ReliaAstra/Reliastra/cli/cmd/reliastra@latest.
Environment
| Variable | Purpose |
|---|---|
RELIASTRA_BIN |
Run this binary instead of downloading. Must be an absolute path to a regular file. |
RELIASTRA_RELEASE_URL |
Alternate release base URL for mirrors/air-gap. Must be https:// (http: loopback only). |
RELIASTRA_CACHE |
Move the binary cache. |
Upgrade / uninstall
pipx upgrade reliastra # or: pip install --upgrade reliastra
pipx uninstall reliastra # or: pip uninstall reliastra
# then optionally: rm -rf ~/.cache/reliastra
Full CLI documentation, versioning and troubleshooting: https://github.com/ReliaAstra/Reliastra/blob/main/cli/README.md
Metadata
Release files for reliastra 0.2.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| reliastra-0.2.0.tar.gz | 7.0 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| reliastra-0.2.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 14.4 kB
Release files / reliastra-0.2.0.tar.gz
| Download URL | reliastra-0.2.0.tar.gz |
|---|---|
| Size | 7.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1ebb4f5c59c9b067a7ee810f7943532f8eb7c9108bf3c890938f02b2de037329
|
|
BLAKE2b-256 checksum How to use checksums |
68227c9f866c176b038e4654cf3aa076b10106af0686850b1fc1d7215d9938ea
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.
Transparency logRelease files / reliastra-0.2.0-py3-none-any.whl
| Download URL | reliastra-0.2.0-py3-none-any.whl |
|---|---|
| Size | 7.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f88ac1e4b57f4e5a46e572aea6c0915e81a6e3b6ae129ff2f4961fab0c291be1
|
|
BLAKE2b-256 checksum How to use checksums |
168d94d496e3156c5100787e45cab0bac5695dec6c89fb2debf36416cb54693b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 30, 2026.
Transparency log