* Package name    : sigstore-python
  Version         : 3.3.0
  Upstream Contact: Sigstore Authors <sigstore-dev@googlegroups.com>
* URL             : https://github.com/sigstore/sigstore-python
* License         : Apache-2.0
  Programming Lang: Python
  Description     : sigstore is a Python tool for generating and verifying Sigstore signatures

Features:

*  Support for keyless signature generation and verification with Sigstore
*  Support for signing with "ambient" OpenID Connect identities
*  A comprehensive CLI and corresponding importable Python API

See recent debian-devel discussion: https://lists.debian.org/msgid-search/20241004182101.lnc5dqft4vurbcrh@satie.tumbleweed.org.za

Looking at pyproject.toml, there are a few dependencies that need to
come first:

  "sigstore-protobuf-specs == 0.3.2",
  "sigstore-rekor-types == 0.0.13",
  "tuf ~= 5.0",

Hi!

I am working on getting python-sigstore into Debian:

https://lists.debian.org/debian-python/2024/12/msg00040.html

Packaging currently lives here:

https://salsa.debian.org/jas/sigstore-python/

I'd appreciate help and collaborators on this!

/Simon

Hi Simon (2024.12.05_22:48:05_+0000)

Feel free to add me as an uploader.

I think the Python Team would make sense for it. If you're not a member,
https://salsa.debian.org/python-team/tools/python-modules/blob/master/policy.rst#joining-the-team

Stefano

retitle 1084157 ITP: sigstore-python -- sigstore is a Python tool for generating and verifying Sigstore signatures
thanks

I'm resuming this work, and hope to complete it to an upload so tagging
this as ITP.  Salsa packaging is now in the python team:

https://salsa.debian.org/python-team/packages/python-sigstore

We wait for two dependencies: python-rfc3161-client and sigstore-models.
Maybe parts of this package is useful without those dependencies, so I
consider uploading this to NEW soon.

All help on packaging and/or dependencies are appreciated!

/Simon

stefanor@debian.org writes: