SDKMS Git Signing Tool
This is a utility for signing/verifying git commits with keys stored in Fortanix Data Security Manager. It includes commands for generating a PGP compatible key in SDKMS.
Setup
-
In SDKMS create an App and an EC key (only NISTP256, NISTP384 and NISTP512 are supported). Take notes of:
- App API Key
- Key UUID
-
In you git repository, the following configuration is needed:
git config --local gpg.program </path/to/sdkms-git-sign-tool>
git config --local user.signingkey <Key UUID>
git config --local sdkms.endpoint <SDKMS endpoint>
git config --local sdkms.apikey <SDKMS API Key>
1 maintainer
Metadata
1 maintainer
Release files for sdkms-git-sign-tool 0.3.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| sdkms_git_sign_tool-0.3.0.tar.gz | 5.5 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| sdkms_git_sign_tool-0.3.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 11.4 kB
Release files / sdkms_git_sign_tool-0.3.0.tar.gz
| Download URL | sdkms_git_sign_tool-0.3.0.tar.gz |
|---|---|
| Size | 5.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
77511b24169142b9b52cc017a91fee1d97a63148c85941d5e1fddc956ae12a3e
|
|
BLAKE2b-256 checksum How to use checksums |
37a5703525b0b2b1ef39e821eb5bb1474185053afb75a1cadffd85d2c2eef71a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.0.1 CPython/3.8.10
|
Release files / sdkms_git_sign_tool-0.3.0-py3-none-any.whl
| Download URL | sdkms_git_sign_tool-0.3.0-py3-none-any.whl |
|---|---|
| Size | 5.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
babb0dc248c769ca330dc932ef3f5bcfbb151a9fe08d69b745c869da479a29d7
|
|
BLAKE2b-256 checksum How to use checksums |
0774bfbffd87ae63745b10821d3399391b1db172c872588ba164a8980bdd62be
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.0.1 CPython/3.8.10
|
Security for sdkms-git-sign-tool 0.3.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
