Generate digital attestations for PyPI (PEP 740) by hugovk · Pull Request #135 · python/cherry-picker

Skip to content

Navigation Menu

Sign in

Appearance settings

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up

Appearance settings

Conversation

@hugovk

Copy link

Member

@hugovk hugovk commented

Sep 27, 2024

edited

Loading

PEP 740 ("Index support for digital attestations") introduces digital attestations which links the PyPI package to the GitHub repo, and helps users verify the source and authenticity of packages.

PyPI is still implementing support, but we can already start using it, which should also help them test out.

@hugovk hugovk merged commit e2540af into python:main

Oct 6, 2024

@hugovk hugovk deleted the attest branch

October 6, 2024 11:20

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ezio-melotti ezio-melotti ezio-melotti approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hugovk @ezio-melotti