trailofbits/adapt-sigstore-pypi

Convert Sigstore bundles to PyPI attestations

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
bundlesSigstore bundles to convert. Accepts only .jsonl files. May contain a glob pattern or list of paths.yes
output-dirDirectory where to store the converted attestations. Optional, if omitted a new temporary directory will be created and returned as an output.no
namedescription
output-dirDirectory containing the converted PyPI attestations