File tree Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Original file line number Diff line number Diff line change 88
99A library to convert between Sigstore Bundles and [ PEP 740] Attestation objects
1010
11- [ PEP 740 ] : https://peps.python.org/pep-0740/
12-
1311## Installation
1412
1513``` bash
@@ -20,8 +18,8 @@ python -m pip install pypi-attestation-models
2018
2119See the full API documentation [ here] .
2220
23-
2421### Signing and verification
22+
2523Use these APIs to create a PEP 740-compliant ` Attestation ` object by signing a Python artifact
2624(i.e: sdist or wheel files), and to verify an ` Attestation ` object against a Python artifact.
2725
@@ -50,7 +48,6 @@ attestation = Attestation.model_validate_json(attestation_path.read_bytes())
5048verifier = Verifier.production()
5149policy
= policy.Identity(
identity = " [email protected] " ,
issuer = " https://accounts.google.com" )
5250attestation.verify(verifier, policy, attestation_path)
53-
5451```
5552
5653### Low-level model conversions
@@ -77,4 +74,6 @@ bundle = pypi_to_sigstore(attestation)
7774print (bundle.to_json())
7875```
7976
77+ [ PEP 740 ] : https://peps.python.org/pep-0740/
78+
8079[ here ] : https://trailofbits.github.io/pypi-attestation-models
You can’t perform that action at this time.
0 commit comments