git
ask
hub
Privacy
Terms
Sign in with GitHub
trailofbits/gh-action-adapt-sigstore-pypi
↗
Stars ·
2
Language ·
Python
License ·
Apache-2.0
Simplify and Visualize This Repo
Scan the safety of this repo
Self Host this repo
Check out more work of Developer: trailofbits
Ask anything about this repo to start.
Add a GitHub Actions step to my Python release workflow that converts Sigstore bundles into PyPI attestations using trailofbits/gh-action-adapt-sigstore-pypi, placing the output in a directory called attestations.
Show me a complete GitHub Actions workflow for publishing a Python package to PyPI that includes generating Sigstore bundles and then converting them to PyPI attestations with the trailofbits/gh-action-adapt-sigstore-pypi action.
How do I configure the trailofbits/gh-action-adapt-sigstore-pypi action to read Sigstore bundles from my build output and write converted attestation files so I can upload them with twine to PyPI?
Full explanation on explaingit →
📎
Send
By chatting or signing in you agree to the
Terms
and chat-message logging (revocable in
History
).