Fridolín Pokorný

* Change is either: * [x] To a Draft PEP * [ ] To an Accepted or Final PEP, with Steering Council approval * [ ] To fix an editorial...

Sign releases with sigstore

10

**Is your feature request related to a problem? Please describe.** As a user of Thoth, I would like to make sure releases of thamos are signed so that I can...

PEP 710: link specifications instead of PEP 610

1

---- 📚 Documentation preview 📚: https://pep-previews--3887.org.readthedocs.build/

PEP 710: remove paragraph stating VCS URL installation

2

---- 📚 Documentation preview 📚: https://pep-previews--3886.org.readthedocs.build/

PEP 710: elaborate on storing at least one hash

2

---- 📚 Documentation preview 📚: https://pep-previews--3884.org.readthedocs.build/

Changes proposed in this pull request: - see https://peps.python.org/pep-0561/ - related #1111 - related #1557 CC @RobbeSneyders

PEP-710: implement provenance_url.json file

5

See [PEP 710 - Recording the provenance of installed packages](https://discuss.python.org/t/pep-710-recording-the-provenance-of-installed-packages/25428) related [PEP-710](https://peps.python.org/pep-0710/).