← Packages
python-sigstore
Python tool for signing and verifying artifacts with Sigstore
- Current
- 4.4.0
- Candidate
- 4.5.1
- License
- Apache-2.0
RuntimeDeps
| Dependency | Observed source | Current requirement | Candidate requirement |
|---|---|---|---|
50.0.2 | >=42✓ | >=47✓ | |
1.6.1 | |||
7.1.0 | Not observed | ||
7.1.0 | Not observed | ||
4.9.6 | |||
0.6.4 | Not observed | ||
2.12.5 | |||
2.14.0 | |||
26.4.0 | Not observed | ||
2.33.1 | |||
1.0.7 | |||
0.1.4 | |||
15.0.0 | |||
0.0.6 | |||
0.0.18 | |||
7.0.0 | |||
3.14.9 |
Dependency conditions
- Applies when (any)
- python_full_version < "3.11"
- Applies when (any)
- python_version < "3.11"
Description
Sigstore provides keyless signing and verification of software artifacts with identity-based certificates and transparency logs.
Changelog
PR · 1
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Checked | ||
Checked | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Metadata unavailable Comparable SPDX license expressions are missing; free text and RPM aggregate License are not compared. | Last attempted | |
Checked | Last attempted | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | ||
Checked |