Skip to content

Research ways to support verifying the PEP 740 digital attestations early #2080

New issue
Jump to bottom
New issue
Jump to bottom
Open
Open
Research ways to support verifying the PEP 740 digital attestations early#2080
Labels
PR wantedFeature is discussed or bug is confirmed, PR neededenhancementImprovements to functionalityfeatureRequest for a new featurehashesRelated to hashes generated via --generate-hasheshelp wantedRequest help from the communityneeds discussionNeed some more discussionneeds more infoNeed more info to clarify issuepackagingPackaging related stuff
@webknjaz

Description

@webknjaz
webknjaz
opened on Apr 26, 2024

The upstream is moving forward now — pypi/warehouse#15871 — so should pip-tools. I don't yet know what it'll look like here but we need to watch for the opportunities to integrate a preliminary support for such security-related features.

Metadata

Assignees

No one assigned

    Labels

    PR wantedFeature is discussed or bug is confirmed, PR neededenhancementImprovements to functionalityfeatureRequest for a new featurehashesRelated to hashes generated via --generate-hasheshelp wantedRequest help from the communityneeds discussionNeed some more discussionneeds more infoNeed more info to clarify issuepackagingPackaging related stuff

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions