v0.0.13
Changed
-
The minimum Python version required has been brought back to
3.9
(#64). -
The
Attestation.verify(...)
API has been changed to remove theVerifier
argument in favor of an optionalstaging: bool
kwarg to select the
Sigstore instance
(#62) -
The
Attestation.verify(...)
API has been changed to accept bothPublisher
andVerificationPolicy
objects as a policy. The publisher object is internally
converted to an appropriate verification policy.
Fixed
-
python -m pypi_attestations verify
now handles inputs likedist/*
gracefully, by pre-filtering any attestation paths from the inputs. -
python -m pypi_attestations verify
now exits with a non-zero exit code
if the verification step fails
(#57)