pyperformance icon indicating copy to clipboard operation
pyperformance copied to clipboard

Published 20 hours ago • verified publisher icon python

Generate digital attestations for PyPI (PEP 740)

Open hugovk opened this issue 4 months ago • 0 comments

PEP 740 ("Index support for digital attestations") introduces signatures which links the PyPI package to the GitHub repo, and helps users verify the source and authenticity of packages.

PyPI is still implementing support, but we can already start using it, which should also help them test out.

  • https://peps.python.org/pep-0740/
  • https://github.com/pypa/gh-action-pypi-publish#generating-and-uploading-attestations
  • https://github.com/pypi/warehouse/issues/15871

hugovk avatar Sep 27 '24 23:09 hugovk