This release has been yanked by its maintainers, and will be ignored by installers, except when explicitly specified.
Consider using release 4.5.0 instead.
Reason given by maintainers: Incompatible w/ latest Sigstore APIs
sigstore-python
⚠️ This project is not ready for general-purpose use! ⚠️
sigstore is a tool for signing and verifying Python package distributions.
Features
- Support for signing Python package distributions using an OpenID Connect identity
- Support for publishing signatures to a Rekor instance
- Support for verifying signatures on Python package distributions
Installation
sigstore requires Python 3.7 or newer, and can be installed directly via pip:
python -m pip install sigstore
Usage
You can run sigstore as a standalone program, or via python -m:
sigstore --help
python -m sigstore --help
Top-level:
Usage: sigstore [OPTIONS] COMMAND [ARGS]...
Options:
--help Show this message and exit.
Commands:
sign
verify
Signing:
Usage: sigstore sign [OPTIONS] FILE [FILE ...]
Options:
--identity-token TEXT
--ctfe FILENAME
--help Show this message and exit.
Verifying
Usage: sigstore verify [OPTIONS] FILE [FILE ...]
Options:
--cert FILENAME [required]
--signature FILENAME [required]
--cert-email TEXT
--help Show this message and exit.
Licensing
sigstore is licensed under the Apache 2.0 License.
Contributing
See the contributing docs for details.
Code of Conduct
Everyone interacting with this project is expected to follow the sigstore Code of Conduct.
Security
Should you discover any security issues, please refer to sigstore's security process.
Info
sigstore-python is developed as part of the sigstore project.
We also use a slack channel! Click here for the invite link.
Release files for sigstore 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| sigstore-0.1.0.tar.gz | 22.2 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| sigstore-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 53.8 kB
Release files / sigstore-0.1.0.tar.gz
| Download URL | sigstore-0.1.0.tar.gz |
|---|---|
| Size | 22.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
991d04732c1e9b7e6e8b9ea61cbea9c6166c54e956446dd25c4f39010e4df429
|
|
BLAKE2b-256 checksum How to use checksums |
1719eb72f43be76311fe732a9b90741c1487207f0d87c8270becf0dae381a421
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.0 CPython/3.9.12
|
Release files / sigstore-0.1.0-py3-none-any.whl
| Download URL | sigstore-0.1.0-py3-none-any.whl |
|---|---|
| Size | 31.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
39a8ec8cceeb9b7728f8527fe5b6ee0f674e939d8d9042cca2a14cd2d456740a
|
|
BLAKE2b-256 checksum How to use checksums |
0f9b6c6e0a6067d93c892188470fcccc1428d349bc3b4eecc273020e8f6799d8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.0 CPython/3.9.12
|
