File tree 2 files changed +22
-2
lines changed
2 files changed +22
-2
lines changed Original file line number Diff line number Diff line change @@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
7
7
8
8
## [ Unreleased]
9
9
10
+ ## [ 0.0.21]
11
+
12
+ ### Changed
13
+
14
+ - The CLI entrypoint is now ` pypi-attestations `
15
+ ([ #82 ] ( https://github.com/trailofbits/pypi-attestations/pull/82 ) )
16
+ - The CLI ` verify ` subcommand has been changed to ` verify attestation ` ,
17
+ as in ` pypi-attestations verify attestation --identity ... `
18
+ ([ #82 ] ( https://github.com/trailofbits/pypi-attestations/pull/82 ) )
19
+
20
+ ### Added
21
+ - The CLI has a new subcommand ` verify pypi ` , which takes a URL to a
22
+ PyPI distribution (either a wheel or a source distribution) and a
23
+ GitHub/GitLab repository. The command verifies the distribution by
24
+ downloading it and its provenance from PyPI, verifying them using
25
+ ` sigstore ` and checking that the repository matches the one in the
26
+ PyPI provenance file.
27
+ ([ #82 ] ( https://github.com/trailofbits/pypi-attestations/pull/82 ) )
28
+
10
29
## [ 0.0.20]
11
30
12
31
### Changed
@@ -212,7 +231,8 @@ This is a corrective release for [0.0.14].
212
231
213
232
- Initial implementation
214
233
215
- [ Unreleased ] : https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.20...HEAD
234
+ [ Unreleased ] : https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.21...HEAD
235
+ [ 0.0.21 ] : https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.20...v0.0.21
216
236
[ 0.0.20 ] : https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.19...v0.0.20
217
237
[ 0.0.19 ] : https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.18...v0.0.19
218
238
[ 0.0.18 ] : https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.17...v0.0.18
Original file line number Diff line number Diff line change 1
1
"""The `pypi-attestations` APIs."""
2
2
3
- __version__ = "0.0.20 "
3
+ __version__ = "0.0.21 "
4
4
5
5
from ._impl import (
6
6
Attestation ,
You can’t perform that action at this time.
0 commit comments